@aglyn/plugins-commerce 1.0.0-beta.243 → 1.0.0-beta.246

package/src/lib/server/store-setup-ai-writer.js

@@ -0,0 +1,174 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { hostRoleCanPublish } from "@aglyn/aglyn/app-utils/organizations";
+import { checkEntitlement } from "@aglyn/aglyn/app-utils/plan-entitlements";
+import { applyStoreSetupChange, readStoreSetupChange, storeSetupFacts } from "../model/store-setup-content.js";
+/** The refusal for a member without the publishing role (admin or editor). */ export const STORE_SETUP_ROLE_REFUSAL = 'Changing store settings through AI needs an admin or editor role';
+/** The refusal for a plan without commerce. */ export const STORE_SETUP_PLAN_REFUSAL = 'Selling online is not included in your plan — see Billing';
+/** What a member is told while a lockdown refuses writes to the site. */ export const STORE_SETUP_LOCKED_REFUSAL = 'This site is not accepting changes right now.';
+const SECTION_NAMES = {
+    shipping: 'Shipping',
+    pickup: 'Local pickup',
+    'local-delivery': 'Local delivery',
+    tax: 'Taxes'
+};
+function locationOf(id, data) {
+    var _data_postalAddress;
+    const postal = (_data_postalAddress = data['postalAddress']) != null ? _data_postalAddress : {};
+    return {
+        id,
+        name: typeof data['name'] === 'string' ? data['name'] : undefined,
+        address: typeof data['address'] === 'string' ? data['address'] : undefined,
+        city: typeof postal['city'] === 'string' ? postal['city'] : undefined,
+        pickup: data['pickup']
+    };
+}
+export function createStoreSetupAiWriter(deps) {
+    const hostRef = (hostId)=>deps.firestore().collection('hosts').doc(hostId);
+    const settingsRef = (hostId)=>hostRef(hostId).collection('settings').doc('store');
+    async function refusalFor(host, context) {
+        var _host_data, _data_memberRoles, _context_org;
+        if (!host.exists) return {
+            status: 404,
+            error: 'Unknown site'
+        };
+        const data = (_host_data = host.data()) != null ? _host_data : {};
+        const role = ((_data_memberRoles = data['memberRoles']) != null ? _data_memberRoles : {})[context.uid];
+        if (!hostRoleCanPublish(role)) return {
+            status: 403,
+            error: STORE_SETUP_ROLE_REFUSAL
+        };
+        if (!checkEntitlement((_context_org = context.org) != null ? _context_org : {}, 'commerce')) {
+            return {
+                status: 403,
+                error: STORE_SETUP_PLAN_REFUSAL
+            };
+        }
+        if (await deps.lockdown({
+            uid: context.uid,
+            org: context.org,
+            host: data
+        })) {
+            return {
+                status: 403,
+                error: STORE_SETUP_LOCKED_REFUSAL
+            };
+        }
+        return null;
+    }
+    return {
+        refusal: async (context)=>refusalFor(await hostRef(context.hostId).get(), context),
+        check: (content)=>{
+            const read = readStoreSetupChange(content);
+            if (read.ok === false) return {
+                ok: false,
+                problems: read.problems
+            };
+            return {
+                ok: true,
+                facts: {
+                    section: read.value.section,
+                    live: true
+                }
+            };
+        },
+        // The settings are one document, not one per change: whatever id is
+        // asked, the store's setup as it stands.
+        read: async ({ hostId, id })=>{
+            var _snapshot_data;
+            const snapshot = await settingsRef(hostId).get();
+            if (!snapshot.exists) return null;
+            return {
+                id,
+                name: 'Store settings',
+                versionId: null,
+                facts: storeSetupFacts((_snapshot_data = snapshot.data()) != null ? _snapshot_data : {})
+            };
+        },
+        write: async (request)=>{
+            const read = readStoreSetupChange(request.content);
+            if (read.ok === false) return {
+                ok: false,
+                status: 400,
+                error: read.problems[0]
+            };
+            const change = read.value;
+            const refusal = await refusalFor(await hostRef(request.hostId).get(), request);
+            if (refusal) return _extends({
+                ok: false
+            }, refusal);
+            const needsLocations = 'location' in change && Boolean(change.location);
+            const db = deps.firestore();
+            const ref = settingsRef(request.hostId);
+            const locations = hostRef(request.hostId).collection('locations');
+            return db.runTransaction(async (tx)=>{
+                var _settings_data, _ref;
+                // Every read before any write, which Firestore requires.
+                const [settings, places] = await Promise.all([
+                    tx.get(ref),
+                    needsLocations ? tx.get(locations) : Promise.resolve(null)
+                ]);
+                const applied = applyStoreSetupChange({
+                    settings: (_settings_data = settings.data()) != null ? _settings_data : {},
+                    locations: ((_ref = places == null ? void 0 : places.docs) != null ? _ref : []).map((doc)=>{
+                        var _doc_data;
+                        return locationOf(doc.id, (_doc_data = doc.data()) != null ? _doc_data : {});
+                    })
+                }, change, {
+                    zoneId: `${request.id}-zone`,
+                    rateId: `${request.id}-rate`
+                });
+                if (applied.ok === false) return {
+                    ok: false,
+                    status: applied.status,
+                    error: applied.error
+                };
+                const write = applied.write;
+                if ((write == null ? void 0 : write.target) === 'settings') {
+                    tx.set(ref, {
+                        [write.field]: write.value
+                    }, {
+                        mergeFields: [
+                            write.field
+                        ]
+                    });
+                } else if ((write == null ? void 0 : write.target) === 'location') {
+                    // The card's `updateDoc`: the map replaced whole, so a cleared field is cleared.
+                    tx.update(locations.doc(write.locationId), {
+                        pickup: write.value
+                    });
+                }
+                return {
+                    ok: true,
+                    replayed: write === null,
+                    // One per item: the settings are one document, so the item names the change.
+                    id: request.id,
+                    name: request.name.trim() || SECTION_NAMES[change.section] || 'Store settings',
+                    versionId: null,
+                    facts: {
+                        section: change.section,
+                        summary: applied.summary,
+                        warnings: applied.warnings,
+                        live: true
+                    }
+                };
+            });
+        }
+    };
+}
+
+//# sourceMappingURL=store-setup-ai-writer.js.map

package/src/lib/server/store-setup-ai-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/store-setup-ai-writer.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { hostRoleCanPublish } from '@aglyn/aglyn/app-utils/organizations'\nimport { checkEntitlement } from '@aglyn/aglyn/app-utils/plan-entitlements'\nimport type {\n  PluginDraftContext,\n  PluginDraftRecord,\n  PluginDraftRefusal,\n  PluginDraftWrite,\n  PluginResourceDraftWriter,\n} from '@aglyn/aglyn/plugin-manager/plugin-resource-drafts'\nimport {\n  applyStoreSetupChange,\n  readStoreSetupChange,\n  storeSetupFacts,\n  type StoreSetupLocation,\n} from '../model/store-setup-content'\n\n/*==========================================\n * THE STORE'S SHIPPING AND TAX SETUP AN AI BUILD CHANGES (AGL-3749)\n *\n * The writer commerce registers for the `store-settings` resource on core's\n * resource-drafts seam, which the `store-shipping`, `store-pickup`,\n * `store-delivery` and `store-tax` build operations execute\n * (`store-setup-ai-capability.ts`). It writes exactly what the console's\n * Shipping, Local delivery, Taxes and Inventory locations cards write:\n *\n *  - who: an admin or an editor on the site (`hostRoleCanPublish`), the\n *    plan's `commerce` feature, and no lockdown refusing a write to the site, its workspace or\n *    the member (`hostWritesFrozen`). The role is stricter than the cards,\n *    which the Firestore rules let an author save too (`canWriteHostContent`):\n *    these settings change what checkout charges, and an AI change of them\n *    is live at once, so it takes the publishing role (Zach, 2026-10-12);\n *  - what: the change is read and applied by `store-setup-content.ts`,\n *    through the cards' own normalizers and checks — the zone-coverage\n *    summary, the pickup and delivery normalizers, delivery's \"can't offer\n *    it yet\" problems, and the manual-tax-without-an-origin refusal;\n *  - how: one map of `settings/store` replaced whole (`mergeFields`, as the\n *    Local delivery card saves), or one location's `pickup` (as the\n *    Inventory locations card saves), inside a transaction, so two items of\n *    one plan changing the same map never lose each other's change.\n *\n * Store settings have no draft state: the cards save them live, and so does\n * this. The plan card is where the person agrees to the change.\n *\n * Asked again for the same change, it writes nothing: a zone, a rate, a\n * delivery zone and a tax rate are found by name or region before anything\n * is added, a new one takes an id derived from the request, and a change the\n * settings already hold is reported as done (`replayed`).\n *\n * Nothing here connects an account or stores a credential: carrier rates and\n * outside tax services are set up by a person in their own cards.\n *=========================================*/\n\ntype Firestore = FirebaseFirestore.Firestore\ntype Stored = Record<string, unknown>\n\n/** The refusal for a member without the publishing role (admin or editor). */\nexport const STORE_SETUP_ROLE_REFUSAL = 'Changing store settings through AI needs an admin or editor role'\n/** The refusal for a plan without commerce. */\nexport const STORE_SETUP_PLAN_REFUSAL = 'Selling online is not included in your plan — see Billing'\n/** What a member is told while a lockdown refuses writes to the site. */\nexport const STORE_SETUP_LOCKED_REFUSAL = 'This site is not accepting changes right now.'\n\n/** Whether a lockdown refuses this member's write to this site; `true` refuses. */\nexport type StoreSetupLockdownCheck = (input: {\n  uid: string\n  org: PluginDraftContext['org']\n  host: Stored\n}) => Promise<boolean>\n\nexport interface StoreSetupAiWriterDeps {\n  firestore: () => Firestore\n  lockdown: StoreSetupLockdownCheck\n}\n\nconst SECTION_NAMES: Record<string, string> = {\n  shipping: 'Shipping',\n  pickup: 'Local pickup',\n  'local-delivery': 'Local delivery',\n  tax: 'Taxes',\n}\n\nfunction locationOf(id: string, data: Stored): StoreSetupLocation {\n  const postal = (data['postalAddress'] ?? {}) as Stored\n  return {\n    id,\n    name: typeof data['name'] === 'string' ? data['name'] : undefined,\n    address: typeof data['address'] === 'string' ? data['address'] : undefined,\n    city: typeof postal['city'] === 'string' ? (postal['city'] as string) : undefined,\n    pickup: data['pickup'],\n  }\n}\n\nexport function createStoreSetupAiWriter(deps: StoreSetupAiWriterDeps): PluginResourceDraftWriter {\n  const hostRef = (hostId: string) => deps.firestore().collection('hosts').doc(hostId)\n  const settingsRef = (hostId: string) => hostRef(hostId).collection('settings').doc('store')\n\n  async function refusalFor(\n    host: FirebaseFirestore.DocumentSnapshot,\n    context: Pick<PluginDraftContext, 'uid' | 'org'>,\n  ): Promise<PluginDraftRefusal | null> {\n    if (!host.exists) return { status: 404, error: 'Unknown site' }\n    const data = (host.data() ?? {}) as Stored\n    const role = ((data['memberRoles'] ?? {}) as Stored)[context.uid]\n    if (!hostRoleCanPublish(role)) return { status: 403, error: STORE_SETUP_ROLE_REFUSAL }\n    if (!checkEntitlement((context.org ?? {}) as never, 'commerce')) {\n      return { status: 403, error: STORE_SETUP_PLAN_REFUSAL }\n    }\n    if (await deps.lockdown({ uid: context.uid, org: context.org, host: data })) {\n      return { status: 403, error: STORE_SETUP_LOCKED_REFUSAL }\n    }\n    return null\n  }\n\n  return {\n    refusal: async (context) => refusalFor(await hostRef(context.hostId).get(), context),\n\n    check: (content) => {\n      const read = readStoreSetupChange(content)\n      if (read.ok === false) return { ok: false, problems: read.problems }\n      return { ok: true, facts: { section: read.value.section, live: true } }\n    },\n\n    // The settings are one document, not one per change: whatever id is\n    // asked, the store's setup as it stands.\n    read: async ({ hostId, id }): Promise<PluginDraftRecord | null> => {\n      const snapshot = await settingsRef(hostId).get()\n      if (!snapshot.exists) return null\n      return { id, name: 'Store settings', versionId: null, facts: storeSetupFacts((snapshot.data() ?? {}) as Stored) }\n    },\n\n    write: async (request): Promise<PluginDraftWrite> => {\n      const read = readStoreSetupChange(request.content)\n      if (read.ok === false) return { ok: false, status: 400, error: read.problems[0] as string }\n      const change = read.value\n      const refusal = await refusalFor(await hostRef(request.hostId).get(), request)\n      if (refusal) return { ok: false, ...refusal }\n      const needsLocations = 'location' in change && Boolean(change.location)\n      const db = deps.firestore()\n      const ref = settingsRef(request.hostId)\n      const locations = hostRef(request.hostId).collection('locations')\n      return db.runTransaction(async (tx): Promise<PluginDraftWrite> => {\n        // Every read before any write, which Firestore requires.\n        const [settings, places] = await Promise.all([\n          tx.get(ref),\n          needsLocations ? tx.get(locations) : Promise.resolve(null),\n        ])\n        const applied = applyStoreSetupChange(\n          {\n            settings: (settings.data() ?? {}) as Stored,\n            locations: (places?.docs ?? []).map((doc) => locationOf(doc.id, (doc.data() ?? {}) as Stored)),\n          },\n          change,\n          { zoneId: `${request.id}-zone`, rateId: `${request.id}-rate` },\n        )\n        if (applied.ok === false) return { ok: false, status: applied.status, error: applied.error }\n        const write = applied.write\n        if (write?.target === 'settings') {\n          tx.set(ref, { [write.field]: write.value }, { mergeFields: [write.field] })\n        } else if (write?.target === 'location') {\n          // The card's `updateDoc`: the map replaced whole, so a cleared field is cleared.\n          tx.update(locations.doc(write.locationId), { pickup: write.value })\n        }\n        return {\n          ok: true,\n          replayed: write === null,\n          // One per item: the settings are one document, so the item names the change.\n          id: request.id,\n          name: request.name.trim() || SECTION_NAMES[change.section] || 'Store settings',\n          versionId: null,\n          facts: { section: change.section, summary: applied.summary, warnings: applied.warnings, live: true },\n        }\n      })\n    },\n  }\n}\n"],"names":["hostRoleCanPublish","checkEntitlement","applyStoreSetupChange","readStoreSetupChange","storeSetupFacts","STORE_SETUP_ROLE_REFUSAL","STORE_SETUP_PLAN_REFUSAL","STORE_SETUP_LOCKED_REFUSAL","SECTION_NAMES","shipping","pickup","tax","locationOf","id","data","postal","name","undefined","address","city","createStoreSetupAiWriter","deps","hostRef","hostId","firestore","collection","doc","settingsRef","refusalFor","host","context","exists","status","error","role","uid","org","lockdown","refusal","get","check","content","read","ok","problems","facts","section","value","live","snapshot","versionId","write","request","change","needsLocations","Boolean","location","db","ref","locations","runTransaction","tx","settings","places","Promise","all","resolve","applied","docs","map","zoneId","rateId","target","set","field","mergeFields","update","locationId","replayed","trim","summary","warnings"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,kBAAkB,QAAQ,uCAAsC;AACzE,SAASC,gBAAgB,QAAQ,2CAA0C;AAQ3E,SACEC,qBAAqB,EACrBC,oBAAoB,EACpBC,eAAe,QAEV,kCAA8B;AAyCrC,4EAA4E,GAC5E,OAAO,MAAMC,2BAA2B,mEAAkE;AAC1G,6CAA6C,GAC7C,OAAO,MAAMC,2BAA2B,4DAA2D;AACnG,uEAAuE,GACvE,OAAO,MAAMC,6BAA6B,gDAA+C;AAczF,MAAMC,gBAAwC;IAC5CC,UAAU;IACVC,QAAQ;IACR,kBAAkB;IAClBC,KAAK;AACP;AAEA,SAASC,WAAWC,EAAU,EAAEC,IAAY;QAC1BA;IAAhB,MAAMC,UAAUD,sBAAAA,IAAI,CAAC,gBAAgB,YAArBA,sBAAyB,CAAC;IAC1C,OAAO;QACLD;QACAG,MAAM,OAAOF,IAAI,CAAC,OAAO,KAAK,WAAWA,IAAI,CAAC,OAAO,GAAGG;QACxDC,SAAS,OAAOJ,IAAI,CAAC,UAAU,KAAK,WAAWA,IAAI,CAAC,UAAU,GAAGG;QACjEE,MAAM,OAAOJ,MAAM,CAAC,OAAO,KAAK,WAAYA,MAAM,CAAC,OAAO,GAAcE;QACxEP,QAAQI,IAAI,CAAC,SAAS;IACxB;AACF;AAEA,OAAO,SAASM,yBAAyBC,IAA4B;IACnE,MAAMC,UAAU,CAACC,SAAmBF,KAAKG,SAAS,GAAGC,UAAU,CAAC,SAASC,GAAG,CAACH;IAC7E,MAAMI,cAAc,CAACJ,SAAmBD,QAAQC,QAAQE,UAAU,CAAC,YAAYC,GAAG,CAAC;IAEnF,eAAeE,WACbC,IAAwC,EACxCC,OAAgD;YAGlCD,YACCf,mBAEQgB;QAJvB,IAAI,CAACD,KAAKE,MAAM,EAAE,OAAO;YAAEC,QAAQ;YAAKC,OAAO;QAAe;QAC9D,MAAMnB,QAAQe,aAAAA,KAAKf,IAAI,cAATe,aAAe,CAAC;QAC9B,MAAMK,OAAO,EAAEpB,oBAAAA,IAAI,CAAC,cAAc,YAAnBA,oBAAuB,CAAC,EAAa,CAACgB,QAAQK,GAAG,CAAC;QACjE,IAAI,CAACnC,mBAAmBkC,OAAO,OAAO;YAAEF,QAAQ;YAAKC,OAAO5B;QAAyB;QACrF,IAAI,CAACJ,kBAAkB6B,eAAAA,QAAQM,GAAG,YAAXN,eAAe,CAAC,GAAa,aAAa;YAC/D,OAAO;gBAAEE,QAAQ;gBAAKC,OAAO3B;YAAyB;QACxD;QACA,IAAI,MAAMe,KAAKgB,QAAQ,CAAC;YAAEF,KAAKL,QAAQK,GAAG;YAAEC,KAAKN,QAAQM,GAAG;YAAEP,MAAMf;QAAK,IAAI;YAC3E,OAAO;gBAAEkB,QAAQ;gBAAKC,OAAO1B;YAA2B;QAC1D;QACA,OAAO;IACT;IAEA,OAAO;QACL+B,SAAS,OAAOR,UAAYF,WAAW,MAAMN,QAAQQ,QAAQP,MAAM,EAAEgB,GAAG,IAAIT;QAE5EU,OAAO,CAACC;YACN,MAAMC,OAAOvC,qBAAqBsC;YAClC,IAAIC,KAAKC,EAAE,KAAK,OAAO,OAAO;gBAAEA,IAAI;gBAAOC,UAAUF,KAAKE,QAAQ;YAAC;YACnE,OAAO;gBAAED,IAAI;gBAAME,OAAO;oBAAEC,SAASJ,KAAKK,KAAK,CAACD,OAAO;oBAAEE,MAAM;gBAAK;YAAE;QACxE;QAEA,oEAAoE;QACpE,yCAAyC;QACzCN,MAAM,OAAO,EAAEnB,MAAM,EAAEV,EAAE,EAAE;gBAGqDoC;YAF9E,MAAMA,WAAW,MAAMtB,YAAYJ,QAAQgB,GAAG;YAC9C,IAAI,CAACU,SAASlB,MAAM,EAAE,OAAO;YAC7B,OAAO;gBAAElB;gBAAIG,MAAM;gBAAkBkC,WAAW;gBAAML,OAAOzC,iBAAiB6C,iBAAAA,SAASnC,IAAI,cAAbmC,iBAAmB,CAAC;YAAc;QAClH;QAEAE,OAAO,OAAOC;YACZ,MAAMV,OAAOvC,qBAAqBiD,QAAQX,OAAO;YACjD,IAAIC,KAAKC,EAAE,KAAK,OAAO,OAAO;gBAAEA,IAAI;gBAAOX,QAAQ;gBAAKC,OAAOS,KAAKE,QAAQ,CAAC,EAAE;YAAW;YAC1F,MAAMS,SAASX,KAAKK,KAAK;YACzB,MAAMT,UAAU,MAAMV,WAAW,MAAMN,QAAQ8B,QAAQ7B,MAAM,EAAEgB,GAAG,IAAIa;YACtE,IAAId,SAAS,OAAO;gBAAEK,IAAI;eAAUL;YACpC,MAAMgB,iBAAiB,cAAcD,UAAUE,QAAQF,OAAOG,QAAQ;YACtE,MAAMC,KAAKpC,KAAKG,SAAS;YACzB,MAAMkC,MAAM/B,YAAYyB,QAAQ7B,MAAM;YACtC,MAAMoC,YAAYrC,QAAQ8B,QAAQ7B,MAAM,EAAEE,UAAU,CAAC;YACrD,OAAOgC,GAAGG,cAAc,CAAC,OAAOC;oBAQfC;gBAPf,yDAAyD;gBACzD,MAAM,CAACA,UAAUC,OAAO,GAAG,MAAMC,QAAQC,GAAG,CAAC;oBAC3CJ,GAAGtB,GAAG,CAACmB;oBACPJ,iBAAiBO,GAAGtB,GAAG,CAACoB,aAAaK,QAAQE,OAAO,CAAC;iBACtD;gBACD,MAAMC,UAAUjE,sBACd;oBACE4D,QAAQ,GAAGA,iBAAAA,SAAShD,IAAI,cAAbgD,iBAAmB,CAAC;oBAC/BH,WAAW,SAACI,0BAAAA,OAAQK,IAAI,mBAAI,EAAE,EAAEC,GAAG,CAAC,CAAC3C;4BAA4BA;+BAApBd,WAAWc,IAAIb,EAAE,GAAGa,YAAAA,IAAIZ,IAAI,cAARY,YAAc,CAAC;;gBAClF,GACA2B,QACA;oBAAEiB,QAAQ,GAAGlB,QAAQvC,EAAE,CAAC,KAAK,CAAC;oBAAE0D,QAAQ,GAAGnB,QAAQvC,EAAE,CAAC,KAAK,CAAC;gBAAC;gBAE/D,IAAIsD,QAAQxB,EAAE,KAAK,OAAO,OAAO;oBAAEA,IAAI;oBAAOX,QAAQmC,QAAQnC,MAAM;oBAAEC,OAAOkC,QAAQlC,KAAK;gBAAC;gBAC3F,MAAMkB,QAAQgB,QAAQhB,KAAK;gBAC3B,IAAIA,CAAAA,yBAAAA,MAAOqB,MAAM,MAAK,YAAY;oBAChCX,GAAGY,GAAG,CAACf,KAAK;wBAAE,CAACP,MAAMuB,KAAK,CAAC,EAAEvB,MAAMJ,KAAK;oBAAC,GAAG;wBAAE4B,aAAa;4BAACxB,MAAMuB,KAAK;yBAAC;oBAAC;gBAC3E,OAAO,IAAIvB,CAAAA,yBAAAA,MAAOqB,MAAM,MAAK,YAAY;oBACvC,iFAAiF;oBACjFX,GAAGe,MAAM,CAACjB,UAAUjC,GAAG,CAACyB,MAAM0B,UAAU,GAAG;wBAAEnE,QAAQyC,MAAMJ,KAAK;oBAAC;gBACnE;gBACA,OAAO;oBACLJ,IAAI;oBACJmC,UAAU3B,UAAU;oBACpB,6EAA6E;oBAC7EtC,IAAIuC,QAAQvC,EAAE;oBACdG,MAAMoC,QAAQpC,IAAI,CAAC+D,IAAI,MAAMvE,aAAa,CAAC6C,OAAOP,OAAO,CAAC,IAAI;oBAC9DI,WAAW;oBACXL,OAAO;wBAAEC,SAASO,OAAOP,OAAO;wBAAEkC,SAASb,QAAQa,OAAO;wBAAEC,UAAUd,QAAQc,QAAQ;wBAAEjC,MAAM;oBAAK;gBACrG;YACF;QACF;IACF;AACF"}

package/src/lib/server.js

@@ -28,6 +28,8 @@ import { registerCommerceMediaPublishGuard } from "./server/media-publish-guard.
 import { registerCommerceRecurringCharges } from "./server/recurring-charges.js";
 import { registerProductCardReader } from "./server/product-card.js";
 import { registerProductAiCapability } from "./server/product-ai-capability.js";
+import { registerStoreSetupAiCapabilities } from "./server/store-setup-ai-capability.js";
+import { registerStoreSetupAiWriter } from "./server/store-setup-ai-writer.console.js";
 import { registerProductDraftWriter } from "./server/product-drafts.js";
 import { registerCommerceTaxProfile } from "./server/tax-profile.js";
 import { registerTaxReturnSource } from "@aglyn/aglyn/plugin-manager/plugin-tax-return-sources";
@@ -154,6 +156,26 @@ registerPluginJob({
         if (sent) console.info(`commerce: sent ${sent} back-in-stock alerts`);
     }
 });
+/**
+ * The review-request email (AGL-3736). HOURLY: a request is owed days after
+ * fulfilment, so an hour's lateness is invisible, and the scan is one
+ * collection-group range query over `reviewRequestDueAtMs` — a field only
+ * orders still owed a request carry, so an empty beat costs one read.
+ */ registerPluginJob({
+    pluginId: BUNDLE_ID,
+    name: 'review-request-emails',
+    intervalMinutes: 60,
+    description: 'Email each buyer one review request, with a single-use link per product, ' + 'days after their order is fulfilled (AGL-3736).',
+    lockdown: {
+        scope: 'per-host'
+    },
+    handler: async (gate)=>{
+        if (!isEmailConfigured()) return;
+        const { scanReviewRequests } = await import("./server/review-requests.js");
+        const { sent } = await scanReviewRequests(gate);
+        if (sent) console.info(`commerce: sent ${sent} review requests`);
+    }
+});
 /**
  * The missing-decrement detector (AGL-2358).
  *
@@ -343,6 +365,11 @@ registerPluginJob({
     registerProductDraftWriter();
     // …and the operation an AI build plans for it, which that writer executes.
     registerProductAiCapability();
+    // …and the store's shipping, pickup, local delivery and tax settings an AI
+    // build sets up (AGL-3749), written live as the console's cards write them,
+    // with the four operations that writer executes.
+    registerStoreSetupAiWriter();
+    registerStoreSetupAiCapabilities();
     // …and why a file somebody is SELLING may not be made public (AGL-3080).
     // The media library asks before it hands an asset its permanent CDN URL
     // back; what a product is, and which of its fields hold paid media, is

package/src/lib/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n\n/**\n * Server half of the commerce plugin (AGL-396): the site-facing storefront\n * API handlers, registered with the plugin API registry and served by the\n * tenant dispatcher at their unchanged `/api/commerce/*` URLs. This module\n * pulls in firebase-admin + Stripe, so it is NOT re-exported from the client\n * barrel — apps import `@aglyn/plugins-commerce/server` only from their\n * (server-only) API dispatcher registration.\n */\n\nimport {\n  registerBillingWebhookHandler,\n  registerPluginApiRoute,\n  registerPluginJob,\n  registerSitePageEnricher,\n  registerSitePageResolver,\n  registerPluginPermissions,\n  registerPluginConfigSchema,\n} from '@aglyn/aglyn/server'\nimport { isEmailConfigured } from '@aglyn/shared-util-email'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { registerCommerceMediaPublishGuard } from './server/media-publish-guard'\nimport { registerCommerceRecurringCharges } from './server/recurring-charges'\nimport { registerProductCardReader } from './server/product-card'\nimport { registerProductAiCapability } from './server/product-ai-capability'\nimport { registerProductDraftWriter } from './server/product-drafts'\nimport { registerCommerceTaxProfile } from './server/tax-profile'\nimport { registerTaxReturnSource } from '@aglyn/aglyn/plugin-manager/plugin-tax-return-sources'\nimport { commerceTaxReturnSource } from './server/tax-return-source'\nimport { taxSummaryHandler } from './server/tax-summary'\nimport { registerRevenueSource } from '@aglyn/aglyn/plugin-manager/plugin-revenue-sources'\nimport { commerceRevenueSource } from './server/revenue-source'\nimport { commerceBillingWebhookHandler } from './server/billing-webhook'\nimport { registerOrderFigureReaders } from './server/order-figures'\nimport { COMMERCE_PERMISSIONS } from './model/plugin-permissions'\nimport { COMMERCE_CONFIG_SCHEMA } from './plugin-config'\nimport { commerceSitePageEnricher } from './server/site-page-enricher'\nimport { commerceSitePageResolver } from './server/site-page-resolver'\nimport { cartCheckoutHandler } from './server/cart-checkout'\nimport { cartHandler } from './server/cart'\nimport { cartExtrasHandler } from './server/checkout-extras'\nimport { catalogHandler } from './server/catalog'\nimport { checkoutHandler } from './server/checkout'\nimport { downloadHandler } from './server/download'\nimport { newsletterHandler } from './server/newsletter'\nimport { notifyRestockHandler } from './server/notify-restock'\nimport { productHandler } from './server/product'\nimport { relatedHandler } from './server/related'\nimport { reservationAvailabilityHandler } from './server/reservation-availability'\nimport { gateHandler } from './server/gate'\nimport { memberFeedHandler } from './server/member-feed'\nimport { membershipAccountHandler } from './server/membership-account'\nimport { membershipAdminPasswordHandler } from './server/membership-admin-password'\nimport { membershipAdminRemoveHandler } from './server/membership-admin-remove'\nimport { membershipContentHandler } from './server/membership-content'\nimport { membershipLoginHandler } from './server/membership-login'\nimport { membershipLogoutHandler } from './server/membership-logout'\nimport { membershipRecoverHandler } from './server/membership-recover'\nimport { membershipRegisterHandler } from './server/membership-register'\nimport { membershipResetHandler } from './server/membership-reset'\nimport { membershipWishlistHandler } from './server/membership-wishlist'\nimport { reserveHandler } from './server/reserve'\nimport { streamHandler } from './server/stream'\nimport { subscriptionPortalHandler } from './server/subscription-portal'\nimport { reviewsHandler } from './server/reviews'\nimport { connectHandler } from './server/connect'\nimport { cancelOrderHandler } from './server/cancel-order'\nimport { carrierRatesAvailabilityHandler } from './server/carrier-rates-availability'\nimport { collectionMembershipHandler } from './server/collection-membership'\nimport { draftOrderHandler } from './server/draft-order'\nimport { fulfillOrderHandler } from './server/fulfill-order'\nimport { orderReceiptSendHandler } from './server/order-receipt-send'\nimport { orderStatusHandler, registerOrderStatusActions } from './server/order-status'\nimport { returnRequestStatusAction } from './server/return-status-action'\nimport { giftCardsHandler } from './server/gift-cards'\nimport { memberPostHandler } from './server/member-post'\nimport { orderAnalyticsHandler } from './server/order-analytics'\nimport { checkoutStatusHandler } from './server/checkout-status'\nimport { posOrderHandler } from './server/pos-order'\nimport { printersHandler } from './server/printers'\nimport { posPaymentHandler } from './server/pos-payment'\nimport { posReadersHandler } from './server/pos-readers'\nimport { posTerminalConnectionTokenHandler } from './server/pos-terminal-connection-token'\nimport { posDisplayHandler } from './server/pos-display'\nimport { posKioskHandler } from './server/pos-kiosk'\nimport { registerPosOpsRoutes } from './server/pos-ops-routes'\nimport {\n  processAbandonedHandler,\n  scanAbandonedCheckouts,\n} from './server/process-abandoned'\nimport { processRestockHandler, scanRestockAlerts } from './server/process-restock'\nimport { scanStockDecrements } from './server/reconcile-stock'\nimport { refundHandler } from './server/refund'\nimport { orderWebhooksHandler } from './server/order-webhooks'\nimport { returnRequestHandler, returnsHandler } from './server/returns'\nimport { scanSupplierDeliveries } from './server/supplier-outbox'\nimport { supplierUpdateHandler } from './server/supplier-update'\n\n/**\n * The two commerce beats (AGL-2227).\n *\n * `commerce/process-abandoned` and `commerce/process-restock` have existed\n * since AGL-323/326 as `x-cron-secret` HTTP doors, and `registerCommerceConsoleApi`\n * below has called them \"the scheduler-driven jobs\" in a comment that whole\n * time. **Nothing scheduled them.** Not `scheduled-crons.yml` (its table names\n * 11 paths; neither of these), not `vercel.json` (no `crons` key at all), not\n * `registerPluginJob` — the only two registrations in the repo were scheduled\n * publishing and the bookings hold-expiry.\n *\n * The cost was a Pro-tier entitlement (`abandonedCart`) that had never sent an\n * email, and a storefront \"notify me when it's back\" form writing into a queue\n * with no drain. AGL-1793 had already added the collection-group indexes these\n * two scans need, which is the clearest evidence they were always meant to run.\n *\n * Module scope, like the bookings job beside it: the runner route reaches jobs\n * through `ensureAll(['tenantApi'])`, and a registration inside a `register*`\n * function would depend on which entry point happened to be loaded.\n *\n * 15 minutes, not 1: `process-abandoned` will not remind a checkout younger\n * than an hour and `process-restock` only mails alerts whose product already\n * has stock, so a tighter beat buys nothing and costs two collection-group\n * scans a minute. Both are bounded (200 docs) and idempotent — each pass\n * stamps what it sent — so an overlapping or repeated beat cannot double-send.\n */\nconst RECOVERY_JOB_INTERVAL_MINUTES = 15\n\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'abandoned-checkout-recovery',\n  intervalMinutes: RECOVERY_JOB_INTERVAL_MINUTES,\n  description:\n    'Email one recovery reminder per stalled checkout (abandonedCart plans).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    // Quietly, not as an error: email is optional per deployment, and a beat\n    // that logs every minute on a self-host without Resend buries everything\n    // else in the log.\n    if (!isEmailConfigured()) return\n    const { sent } = await scanAbandonedCheckouts(gate)\n    if (sent) console.info(`commerce: sent ${sent} abandoned-cart reminders`)\n  },\n})\n\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'back-in-stock-alerts',\n  intervalMinutes: RECOVERY_JOB_INTERVAL_MINUTES,\n  description: 'Email shoppers whose requested product is in stock again.',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!isEmailConfigured()) return\n    const { sent } = await scanRestockAlerts(gate)\n    if (sent) console.info(`commerce: sent ${sent} back-in-stock alerts`)\n  },\n})\n\n/**\n * The missing-decrement detector (AGL-2358).\n *\n * HOURLY, not on the 15-minute recovery beat: it is a detector for a rare\n * process death, not a queue drain, and nothing it finds gets less true for\n * waiting an hour. The cost of the beat is what sets the interval — one\n * collection-group read of the platform's most recent orders, plus two\n * queries per host that has any — and an hour keeps that off the same tick as\n * the two scans above.\n *\n * NOT gated on `isEmailConfigured()`, unlike its two neighbours. Those send\n * mail; this writes a console notification and a log line, both of which work\n * on a self-host with no mail provider at all — and a stock count that is\n * silently wrong is exactly what a self-hoster least wants suppressed by a\n * setting about email.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'stock-decrement-reconciliation',\n  intervalMinutes: 60,\n  description:\n    'Report paid orders whose stock decrement never landed (AGL-2358).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    const scan = await scanStockDecrements(gate)\n    if (scan.missingLines || scan.truncatedHosts) {\n      console.warn(\n        `commerce: ${scan.missingLines} order lines across ${scan.hosts} ` +\n          `sites have no sale ledger row (${scan.reportedOrders} newly ` +\n          `reported, ${scan.truncatedHosts} sites' ledger window truncated)`,\n      )\n    }\n  },\n})\n\n/**\n * The dropship supplier outbox drain (AGL-2473).\n *\n * EVERY MINUTE, unlike the three above, and the interval is the point rather\n * than an oversight. This is the only one of the four that a BUYER is waiting\n * on: the row it drains is a paid order that has not been routed to whoever\n * ships it, and every minute it sits is a minute the parcel is not moving. The\n * first backoff step is also 60s, so a supplier that blipped is retried on the\n * next tick.\n *\n * The cost that set fifteen minutes for the recovery pair does not apply. Those\n * are collection-GROUP scans across every site on the platform; this is one\n * ordinary equality query against a top-level collection that is EMPTY in the\n * ordinary case — an empty result bills a single read, so the whole beat is\n * ~1,440 reads a day whether or not anyone is dropshipping.\n *\n * Not gated on `isEmailConfigured()`. The supplier notification is an HTTP POST\n * to the merchant's own supplier, and a self-host with no mail provider still\n * has dropship orders to route.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'supplier-webhook-delivery',\n  intervalMinutes: 1,\n  description:\n    'Deliver queued dropship supplier notifications, with backoff and a ' +\n    'dead letter that tells the merchant (AGL-2473).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    const scan = await scanSupplierDeliveries(gate)\n    if (scan.deadLettered) {\n      console.warn(\n        `commerce: ${scan.deadLettered} dropship orders could not be routed ` +\n          `to their supplier and have been reported on the order`,\n      )\n    }\n  },\n})\n\n/**\n * Stripe payment method domains for every connected custom domain (AGL-3629).\n *\n * The backfill for domains connected before registration existed, and the\n * repair for a connect whose event was lost, in one daily pass. A domain\n * already registered costs a document read and no Stripe call, so the beat is\n * cheap; a day's delay costs only the Apple Pay button on a domain connected\n * while Stripe was unreachable, and the first in-page checkout there registers\n * it anyway.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'payment-method-domains',\n  intervalMinutes: 24 * 60,\n  description:\n    'Register connected custom domains with Stripe so Apple Pay, Google Pay ' +\n    'and Link show on them (AGL-3629).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!process.env.STRIPE_SECRET_KEY) return\n    const { reconcileCustomDomains } = await import('./server/payment-method-domains')\n    const result = await reconcileCustomDomains(gate)\n    if (result.registered || result.failed) {\n      console.info(\n        `commerce: payment method domains — ${result.registered} registered, ` +\n          `${result.failed} failed across ${result.hosts} sites`,\n      )\n    }\n  },\n})\n\n/**\n * A visitor's payment door: it opens a Stripe Checkout Session for whoever\n * calls it, so the dispatcher holds it to the card-testing counters\n * (AGL-3363). Declared here, beside the registration, so the door cannot\n * exist without it.\n */\nconst CARD_PAYMENT_DOOR = { cardPayment: true } as const\n\n/** Registers the commerce plugin's storefront API routes. */\nexport function registerCommerceApi(): void {\n  registerProductCardReader()\n  // The merchant's tax rule, for every plugin that prices a charge here.\n  registerCommerceTaxProfile()\n  registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // Merchant-settable register discount ceiling (AGL-2161). Registered on\n  // BOTH surfaces, like the permissions above: the POS route reads it\n  // server-side, and the settings card renders it from the same schema.\n  registerPluginConfigSchema(COMMERCE_CONFIG_SCHEMA)\n  // PDP/PLP template pages (AGL-418): /products/* + /collections/*.\n  registerSitePageResolver(commerceSitePageResolver)\n  // Seeds product grids on ordinary screens (AGL-659) — the resolver above\n  // only covers /products/* and /collections/*, so /products itself, and any\n  // designed page with a grid on it, needed this to render server-side.\n  registerSitePageEnricher(commerceSitePageEnricher)\n  registerPluginApiRoute('commerce/cart-checkout', cartCheckoutHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/cart', cartHandler)\n  // What the cart offers besides shipping (AGL-3624): pickup locations, and\n  // local delivery's fee, minimum and windows for a postal code.\n  registerPluginApiRoute('commerce/local-fulfillment-options', async (req, res) =>\n    (await import('./server/local-fulfillment')).localFulfillmentOptionsHandler(req, res),\n  )\n  // Optional lines another plugin offers at the cart (AGL-3635).\n  registerPluginApiRoute('commerce/cart-extras', cartExtrasHandler)\n  registerPluginApiRoute('commerce/catalog', catalogHandler)\n  registerPluginApiRoute('commerce/checkout', checkoutHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/download', downloadHandler)\n  // The pre-channels Google feed address (AGL-299), now written by the\n  // catalog's feed publisher (AGL-3637); the module loads with a fetch.\n  registerPluginApiRoute('commerce/feed', {\n    web: async (request) => (await import('./server/legacy-feed')).legacyFeedRoute(request),\n  })\n  registerPluginApiRoute('commerce/newsletter', newsletterHandler)\n  registerPluginApiRoute('commerce/notify-restock', notifyRestockHandler)\n  // GA-safe order projection for the storefront `purchase` (AGL-1641).\n  registerPluginApiRoute('commerce/order-analytics', orderAnalyticsHandler)\n  // The guest order-status page's data (AGL-3610), behind the signed link in\n  // every buyer email — a recipient link, so it outlives the site's gates.\n  registerPluginApiRoute('commerce/order-status', orderStatusHandler, { recipientLink: true })\n  // …and its \"Request a return\" button (AGL-3611), on an order that can\n  // still send something back.\n  registerOrderStatusActions(returnRequestStatusAction)\n  // What became of a session the shopper was returned from (AGL-3606).\n  registerPluginApiRoute('commerce/checkout-status', checkoutStatusHandler)\n  registerPluginApiRoute('commerce/product', productHandler)\n  registerPluginApiRoute('commerce/related', relatedHandler)\n  registerPluginApiRoute('commerce/reservation-availability', reservationAvailabilityHandler)\n  registerPluginApiRoute('commerce/reserve', reserveHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/gate', gateHandler)\n  registerPluginApiRoute('commerce/member-feed', memberFeedHandler)\n  registerPluginApiRoute('commerce/stream', streamHandler)\n  registerPluginApiRoute('commerce/subscription-portal', subscriptionPortalHandler)\n  registerPluginApiRoute('commerce/reviews', reviewsHandler)\n  // A buyer's return request (AGL-3611), from their account or the signed\n  // order-status link.\n  registerPluginApiRoute('commerce/return-request', returnRequestHandler)\n  registerPluginApiRoute('membership/account', membershipAccountHandler)\n  registerPluginApiRoute('membership/content', membershipContentHandler)\n  registerPluginApiRoute('membership/login', membershipLoginHandler)\n  registerPluginApiRoute('membership/logout', membershipLogoutHandler)\n  // Password recovery pair (AGL-552): request + complete.\n  registerPluginApiRoute('membership/recover', membershipRecoverHandler)\n  registerPluginApiRoute('membership/register', membershipRegisterHandler)\n  registerPluginApiRoute('membership/reset', membershipResetHandler)\n  registerPluginApiRoute('membership/wishlist', membershipWishlistHandler)\n}\n\n/**\n * Registers the commerce plugin's console-side API routes (AGL-396):\n * merchant/staff operations (Connect onboarding, refunds, draft & POS\n * orders, member posts), the supplier tracking callback, and the HTTP doors\n * for the abandoned-cart / restock passes.\n *\n * Those last two are NOT what schedules them — the `registerPluginJob` calls\n * above are (AGL-2227). This comment used to call them \"the scheduler-driven\n * jobs\", which is how they stayed dark for months: it asserted the wiring\n * instead of having it.\n */\nexport function registerCommerceConsoleApi(): void {\n  // The register's gate (`managePos`) is resolved on THIS surface: every POS\n  // route below runs in the console, and a key no surface registered here is\n  // absent from the resolved map, which reads as refused — the site's own\n  // owner was answered 403 at the register.\n  registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // What a product looks like to a surface that is not this plugin's — a\n  // campaign email that features one asks here rather than importing the model.\n  registerProductCardReader()\n  // …and a draft product another plugin asks for by name (AGL-3616): an AI\n  // build setting a store up from a brief, unpriced unless the brief priced it.\n  // The console runs AI jobs (AGL-3026).\n  registerProductDraftWriter()\n  // …and the operation an AI build plans for it, which that writer executes.\n  registerProductAiCapability()\n  // …and why a file somebody is SELLING may not be made public (AGL-3080).\n  // The media library asks before it hands an asset its permanent CDN URL\n  // back; what a product is, and which of its fields hold paid media, is\n  // this plugin's to know.\n  registerCommerceMediaPublishGuard()\n  // …and which memberships a site sells, for a security lockdown to pause\n  // (AGL-3364). The lockdown route runs on this surface.\n  registerCommerceRecurringCharges()\n  // …and the tax rule, for the webhook that confirms what they charged.\n  registerCommerceTaxProfile()\n  // …and its sales on the operator's own sales tax return (AGL-3080): the\n  // tax a storefront checkout collected under the platform's registrations.\n  // The staff return awaits this surface before it asks, and refuses to be\n  // filed without this source — commerce declares `taxReturnSource`.\n  registerTaxReturnSource(commerceTaxReturnSource, { pluginId: BUNDLE_ID })\n  // …and the take its orders earn the operator, on the staff revenue report\n  // (AGL-3080) — commerce declares `revenueSource`, so the report names this\n  // source as unread rather than counting it as zero if it is missing.\n  registerRevenueSource(commerceRevenueSource, { pluginId: BUNDLE_ID })\n  // Stripe webhook sections (AGL-418): orders/carts/drafts/reservations/\n  // subscriptions ride the platform webhook via the hook registry.\n  registerBillingWebhookHandler(commerceBillingWebhookHandler)\n  // Cancel + stock release in one transaction (AGL-1808). Server-side because\n  // the release depends on the transition rule, and a client write could not\n  // re-ask it under the same lock that flips the status.\n  registerPluginApiRoute('commerce/cancel-order', cancelOrderHandler)\n  // Whether live carrier rates can be offered on this site (AGL-3612).\n  registerPluginApiRoute('commerce/shipping/carrier-rates', carrierRatesAvailabilityHandler)\n  registerPluginApiRoute('commerce/connect', connectHandler)\n  registerPluginApiRoute('commerce/draft-order', draftOrderHandler)\n  // Fulfil + mark-delivered with the transition re-asked under the write\n  // (AGL-1819) — the same stale-dialog hole cancel-order closes, minus the\n  // stock release those two transitions never had. The customer REST API's\n  // `PATCH /v1/sites/{id}/orders/{id}` records a shipment through the same\n  // transaction (`server/api-v1/orders-and-products.ts`).\n  registerPluginApiRoute('commerce/fulfill-order', fulfillOrderHandler)\n  // Pickup and local delivery steps (AGL-3624) — ready, picked up, out for\n  // delivery, delivered — from the console queue, the order dialog and the\n  // native Aglyn app. Loaded on first call.\n  registerPluginApiRoute('commerce/local-fulfillment', async (req, res) =>\n    (await import('./server/local-fulfillment-status')).localFulfillmentHandler(req, res),\n  )\n  // \"Resend receipt\" from the order dialog (AGL-3610): by email, or by text\n  // when the platform's SMS provider is configured. Rate-limited per member\n  // and per order.\n  registerPluginApiRoute('commerce/order-receipt-send', orderReceiptSendHandler)\n  // The product editor's save and Adjust stock for the native apps (AGL-3652):\n  // the console's own product-write computation under the rules' gate. Loaded\n  // on first call.\n  registerPluginApiRoute('commerce/products/save', async (req, res) =>\n    (await import('./server/products-write')).productSaveHandler(req, res),\n  )\n  registerPluginApiRoute('commerce/products/stock', async (req, res) =>\n    (await import('./server/products-write')).productStockHandler(req, res),\n  )\n  // The order dialog's note and restock answer for the native apps\n  // (AGL-3651, AGL-3652): the console's own timeline computation, in one\n  // transaction on the stored order. Loaded on first call.\n  registerPluginApiRoute('commerce/order-note', async (req, res) =>\n    (await import('./server/order-annotations')).orderNoteHandler(req, res),\n  )\n  registerPluginApiRoute('commerce/order-restock-answer', async (req, res) =>\n    (await import('./server/order-annotations')).orderRestockAnswerHandler(req, res),\n  )\n  // Issue / void store credit (AGL-2226). Server-side because the host\n  // catch-all in the Firestore rules would otherwise let a client write\n  // its own `balanceCents`, which checkout applies as amount-off.\n  registerPluginApiRoute('commerce/gift-cards', giftCardsHandler)\n  // The merchant's own storefront sales tax, by who owes it (AGL-2440): the\n  // same rows and classifier the operator's return reads, fenced to one site.\n  registerPluginApiRoute('commerce/tax-summary', { web: taxSummaryHandler })\n  // The payment methods card (AGL-3629): toggles, the platform's offer, the\n  // payout account's capabilities and the site's wallet domains. Loaded with\n  // the first request, so a console that never opens Settings never imports it.\n  registerPluginApiRoute('commerce/payment-methods', {\n    web: async (request) =>\n      (await import('./server/payment-methods')).paymentMethodsHandler(request),\n  })\n  // A smart collection's rules changed or it was deleted: re-stamp which\n  // products it holds (AGL-3321), the membership the storefront queries.\n  registerPluginApiRoute('commerce/collection-membership', collectionMembershipHandler)\n  // A site member's password help (AGL-914) and removal (AGL-3308), from the\n  // Users page drawer and the Inbox. Console-auth, not the visitor cookie the\n  // storefront's `membership/*` routes take, so they are served where the\n  // console posts: the console's own dispatcher loads this surface only.\n  registerPluginApiRoute(\n    'membership/admin-password',\n    membershipAdminPasswordHandler,\n  )\n  registerPluginApiRoute('membership/admin-remove', membershipAdminRemoveHandler)\n  registerPluginApiRoute('commerce/member-post', memberPostHandler)\n  registerPluginApiRoute('commerce/pos-order', posOrderHandler)\n  // A register's cloud receipt printers and the jobs a manager sends them\n  // (AGL-3619), and the two doors the printers themselves poll. The doors are\n  // MACHINE routes: a printer is no member and names no site cookie, so it\n  // authenticates with the per-printer secret in its URL and its own device id,\n  // and the route asks the plan before it hands over a job. Loaded with the\n  // first poll, so a console that has no printers never imports them.\n  registerPluginApiRoute('commerce/printers', printersHandler)\n  registerPluginApiRoute(\n    'commerce/cloudprnt/:hostId/:printerId/:secret',\n    {\n      web: async (request, context) =>\n        (await import('./server/printer-poll')).cloudPrntRoute(request, context),\n    },\n    { machine: true },\n  )\n  registerPluginApiRoute(\n    'commerce/epson-sdp/:hostId/:printerId/:secret',\n    {\n      web: async (request, context) =>\n        (await import('./server/printer-poll')).epsonServerDirectPrintRoute(request, context),\n    },\n    { machine: true },\n  )\n  // The register's tenders against an open sale, its Stripe Terminal card\n  // readers, and the paired customer display (AGL-3607, AGL-3608). The\n  // display's `pair`/`poll`/`respond` take a display token and no console\n  // session; every other action is gated like a sale.\n  registerPluginApiRoute('commerce/pos-payment', posPaymentHandler)\n  registerPluginApiRoute('commerce/pos-readers', posReadersHandler)\n  registerPluginApiRoute('commerce/pos-display', posDisplayHandler)\n  // The self-service kiosk (AGL-3623): a register's paired screen where the\n  // customer orders and pays. Its device token, never a staff session; the\n  // register's queue of \"pay at counter\" orders is gated like a sale.\n  registerPluginApiRoute('commerce/pos-kiosk', posKioskHandler)\n  // Shifts, staff PINs, the customer lookup and returns (AGL-3609).\n  registerPosOpsRoutes()\n  // The offline register (AGL-3625): the kit a register caches to sell cash\n  // while the connection is down, and the sync that records those sales once.\n  // Gated like a sale; loaded with its first call.\n  registerPluginApiRoute('commerce/pos-offline-sync', async (req, res) =>\n    (await import('./server/pos-offline-sync')).posOfflineSyncHandler(req, res),\n  )\n  // The native Aglyn POS app's Stripe Terminal SDK: a connection token scoped\n  // to the site's Location, and the Location itself (AGL-3618). Gated like a\n  // sale.\n  registerPluginApiRoute('commerce/pos-terminal-connection-token', posTerminalConnectionTokenHandler)\n  registerPluginApiRoute('commerce/process-abandoned', processAbandonedHandler)\n  registerPluginApiRoute('commerce/process-restock', processRestockHandler)\n  registerPluginApiRoute('commerce/refund', refundHandler)\n  // Returns (AGL-3611): approve, decline, receive with restock, refund\n  // through the route above, a label from a shipping plugin.\n  registerPluginApiRoute('commerce/returns', returnsHandler)\n  // The merchant's outbound order webhooks (AGL-3611): endpoints, secrets,\n  // a test ping and a resend from the delivery log.\n  registerPluginApiRoute('commerce/order-webhooks', orderWebhooksHandler)\n  registerPluginApiRoute('commerce/supplier-update', supplierUpdateHandler)\n  // Stamps the open orders that predate the shipping fields, before an\n  // export for shipping (AGL-3613).\n  registerPluginApiRoute('commerce/orders-shipping-prepare', async (req, res) =>\n    (await import('./server/orders-shipping-prepare')).ordersShippingPrepareHandler(req, res),\n  )\n  // ShipStation's Custom Store endpoint (AGL-3613): ShipStation's servers\n  // pull the order feed and post shipments back with the site's own Basic\n  // credentials, so it is a MACHINE's route and asks the site's commerce,\n  // plan, release and lockdown gates itself once the credentials prove the\n  // site. Loaded on its first call, never with the console API surface.\n  registerPluginApiRoute(\n    'commerce/shipstation/:hostId',\n    {\n      web: async (request, context) =>\n        (await import('./server/shipstation')).shipStationRoute(request, context),\n    },\n    { machine: true },\n  )\n  // ShippingEasy's shipment callback (AGL-3633): ShippingEasy's servers post\n  // each label bought for an order this store sent them, signed with the\n  // merchant's own API secret, so it is a MACHINE's route like ShipStation's\n  // above and asks the same gates once the signature proves the site.\n  registerPluginApiRoute(\n    'commerce/shippingeasy/:hostId',\n    {\n      web: async (request, context) =>\n        (await import('./server/shippingeasy')).shippingEasyRoute(request, context),\n    },\n    { machine: true },\n  )\n  // The ShipStation and ShippingEasy cards' connect, show, new password,\n  // send open orders and disconnect.\n  registerPluginApiRoute('commerce/shipping-connectors', async (req, res) =>\n    (await import('./server/shipping-connectors')).shippingConnectorsHandler(req, res),\n  )\n  // The store's sales as figure tables (AGL-2915), for the AI plugin's\n  // insights to read by id rather than by reading orders. The console runs\n  // insight jobs, so the console surface registers them.\n  registerOrderFigureReaders(() => firebaseAdmin.app().firestore())\n}\n\n// Shared with the (still app-side) membership/account route.\nexport { mintDownloadToken } from './server/download'\n\n// Site-member session primitives, shared with the (still app-side)\n// membership/* routes until those migrate too (AGL-396).\nexport * from './server/membership'\n\n// Type-only (AGL-3080): the plugin's entitlement keys, declared by module\n// augmentation, for every program that loads this entry point.\nexport type { commercePlanEntitlements } from './plan-entitlements'\n"],"names":["registerBillingWebhookHandler","registerPluginApiRoute","registerPluginJob","registerSitePageEnricher","registerSitePageResolver","registerPluginPermissions","registerPluginConfigSchema","isEmailConfigured","firebaseAdmin","BUNDLE_ID","registerCommerceMediaPublishGuard","registerCommerceRecurringCharges","registerProductCardReader","registerProductAiCapability","registerProductDraftWriter","registerCommerceTaxProfile","registerTaxReturnSource","commerceTaxReturnSource","taxSummaryHandler","registerRevenueSource","commerceRevenueSource","commerceBillingWebhookHandler","registerOrderFigureReaders","COMMERCE_PERMISSIONS","COMMERCE_CONFIG_SCHEMA","commerceSitePageEnricher","commerceSitePageResolver","cartCheckoutHandler","cartHandler","cartExtrasHandler","catalogHandler","checkoutHandler","downloadHandler","newsletterHandler","notifyRestockHandler","productHandler","relatedHandler","reservationAvailabilityHandler","gateHandler","memberFeedHandler","membershipAccountHandler","membershipAdminPasswordHandler","membershipAdminRemoveHandler","membershipContentHandler","membershipLoginHandler","membershipLogoutHandler","membershipRecoverHandler","membershipRegisterHandler","membershipResetHandler","membershipWishlistHandler","reserveHandler","streamHandler","subscriptionPortalHandler","reviewsHandler","connectHandler","cancelOrderHandler","carrierRatesAvailabilityHandler","collectionMembershipHandler","draftOrderHandler","fulfillOrderHandler","orderReceiptSendHandler","orderStatusHandler","registerOrderStatusActions","returnRequestStatusAction","giftCardsHandler","memberPostHandler","orderAnalyticsHandler","checkoutStatusHandler","posOrderHandler","printersHandler","posPaymentHandler","posReadersHandler","posTerminalConnectionTokenHandler","posDisplayHandler","posKioskHandler","registerPosOpsRoutes","processAbandonedHandler","scanAbandonedCheckouts","processRestockHandler","scanRestockAlerts","scanStockDecrements","refundHandler","orderWebhooksHandler","returnRequestHandler","returnsHandler","scanSupplierDeliveries","supplierUpdateHandler","RECOVERY_JOB_INTERVAL_MINUTES","pluginId","name","intervalMinutes","description","lockdown","scope","handler","gate","sent","console","info","scan","missingLines","truncatedHosts","warn","hosts","reportedOrders","deadLettered","process","env","STRIPE_SECRET_KEY","reconcileCustomDomains","result","registered","failed","CARD_PAYMENT_DOOR","cardPayment","registerCommerceApi","req","res","localFulfillmentOptionsHandler","web","request","legacyFeedRoute","recipientLink","registerCommerceConsoleApi","localFulfillmentHandler","productSaveHandler","productStockHandler","orderNoteHandler","orderRestockAnswerHandler","paymentMethodsHandler","context","cloudPrntRoute","machine","epsonServerDirectPrintRoute","posOfflineSyncHandler","ordersShippingPrepareHandler","shipStationRoute","shippingEasyRoute","shippingConnectorsHandler","app","firestore","mintDownloadToken"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD;;;;;;;CAOC,GAED,SACEA,6BAA6B,EAC7BC,sBAAsB,EACtBC,iBAAiB,EACjBC,wBAAwB,EACxBC,wBAAwB,EACxBC,yBAAyB,EACzBC,0BAA0B,QACrB,sBAAqB;AAC5B,SAASC,iBAAiB,QAAQ,2BAA0B;AAC5D,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,iCAAiC,QAAQ,kCAA8B;AAChF,SAASC,gCAAgC,QAAQ,gCAA4B;AAC7E,SAASC,yBAAyB,QAAQ,2BAAuB;AACjE,SAASC,2BAA2B,QAAQ,oCAAgC;AAC5E,SAASC,0BAA0B,QAAQ,6BAAyB;AACpE,SAASC,0BAA0B,QAAQ,0BAAsB;AACjE,SAASC,uBAAuB,QAAQ,wDAAuD;AAC/F,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,qBAAqB,QAAQ,qDAAoD;AAC1F,SAASC,qBAAqB,QAAQ,6BAAyB;AAC/D,SAASC,6BAA6B,QAAQ,8BAA0B;AACxE,SAASC,0BAA0B,QAAQ,4BAAwB;AACnE,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,sBAAsB,QAAQ,qBAAiB;AACxD,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,WAAW,QAAQ,mBAAe;AAC3C,SAASC,iBAAiB,QAAQ,8BAA0B;AAC5D,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,iBAAiB,QAAQ,yBAAqB;AACvD,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,8BAA8B,QAAQ,uCAAmC;AAClF,SAASC,WAAW,QAAQ,mBAAe;AAC3C,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,8BAA8B,QAAQ,wCAAoC;AACnF,SAASC,4BAA4B,QAAQ,sCAAkC;AAC/E,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,aAAa,QAAQ,qBAAiB;AAC/C,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SAASC,+BAA+B,QAAQ,yCAAqC;AACrF,SAASC,2BAA2B,QAAQ,oCAAgC;AAC5E,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,uBAAuB,QAAQ,iCAA6B;AACrE,SAASC,kBAAkB,EAAEC,0BAA0B,QAAQ,2BAAuB;AACtF,SAASC,yBAAyB,QAAQ,mCAA+B;AACzE,SAASC,gBAAgB,QAAQ,yBAAqB;AACtD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,qBAAqB,QAAQ,8BAA0B;AAChE,SAASC,qBAAqB,QAAQ,8BAA0B;AAChE,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,iCAAiC,QAAQ,4CAAwC;AAC1F,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SACEC,uBAAuB,EACvBC,sBAAsB,QACjB,gCAA4B;AACnC,SAASC,qBAAqB,EAAEC,iBAAiB,QAAQ,8BAA0B;AACnF,SAASC,mBAAmB,QAAQ,8BAA0B;AAC9D,SAASC,aAAa,QAAQ,qBAAiB;AAC/C,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SAASC,oBAAoB,EAAEC,cAAc,QAAQ,sBAAkB;AACvE,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,qBAAqB,QAAQ,8BAA0B;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GACD,MAAMC,gCAAgC;AAEtCrF,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiBH;IACjBI,aACE;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,yEAAyE;QACzE,yEAAyE;QACzE,mBAAmB;QACnB,IAAI,CAACxF,qBAAqB;QAC1B,MAAM,EAAEyF,IAAI,EAAE,GAAG,MAAMnB,uBAAuBkB;QAC9C,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,yBAAyB,CAAC;IAC1E;AACF;AAEA9F,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiBH;IACjBI,aAAa;IACbC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAACxF,qBAAqB;QAC1B,MAAM,EAAEyF,IAAI,EAAE,GAAG,MAAMjB,kBAAkBgB;QACzC,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,qBAAqB,CAAC;IACtE;AACF;AAEA;;;;;;;;;;;;;;;CAeC,GACD9F,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiB;IACjBC,aACE;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,MAAMI,OAAO,MAAMnB,oBAAoBe;QACvC,IAAII,KAAKC,YAAY,IAAID,KAAKE,cAAc,EAAE;YAC5CJ,QAAQK,IAAI,CACV,CAAC,UAAU,EAAEH,KAAKC,YAAY,CAAC,oBAAoB,EAAED,KAAKI,KAAK,CAAC,CAAC,CAAC,GAChE,CAAC,+BAA+B,EAAEJ,KAAKK,cAAc,CAAC,OAAO,CAAC,GAC9D,CAAC,UAAU,EAAEL,KAAKE,cAAc,CAAC,gCAAgC,CAAC;QAExE;IACF;AACF;AAEA;;;;;;;;;;;;;;;;;;;CAmBC,GACDnG,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiB;IACjBC,aACE,wEACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,MAAMI,OAAO,MAAMd,uBAAuBU;QAC1C,IAAII,KAAKM,YAAY,EAAE;YACrBR,QAAQK,IAAI,CACV,CAAC,UAAU,EAAEH,KAAKM,YAAY,CAAC,qCAAqC,CAAC,GACnE,CAAC,qDAAqD,CAAC;QAE7D;IACF;AACF;AAEA;;;;;;;;;CASC,GACDvG,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiB,KAAK;IACtBC,aACE,4EACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAACW,QAAQC,GAAG,CAACC,iBAAiB,EAAE;QACpC,MAAM,EAAEC,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC;QAChD,MAAMC,SAAS,MAAMD,uBAAuBd;QAC5C,IAAIe,OAAOC,UAAU,IAAID,OAAOE,MAAM,EAAE;YACtCf,QAAQC,IAAI,CACV,CAAC,mCAAmC,EAAEY,OAAOC,UAAU,CAAC,aAAa,CAAC,GACpE,GAAGD,OAAOE,MAAM,CAAC,eAAe,EAAEF,OAAOP,KAAK,CAAC,MAAM,CAAC;QAE5D;IACF;AACF;AAEA;;;;;CAKC,GACD,MAAMU,oBAAoB;IAAEC,aAAa;AAAK;AAE9C,2DAA2D,GAC3D,OAAO,SAASC;IACdvG;IACA,uEAAuE;IACvEG;IACAV,0BAA0BkB;IAC1B,wEAAwE;IACxE,oEAAoE;IACpE,sEAAsE;IACtEjB,2BAA2BkB;IAC3B,kEAAkE;IAClEpB,yBAAyBsB;IACzB,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtEvB,yBAAyBsB;IACzBxB,uBAAuB,0BAA0B0B,qBAAqBsF;IACtEhH,uBAAuB,iBAAiB2B;IACxC,0EAA0E;IAC1E,+DAA+D;IAC/D3B,uBAAuB,sCAAsC,OAAOmH,KAAKC,MACvE,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGC,8BAA8B,CAACF,KAAKC;IAEnF,+DAA+D;IAC/DpH,uBAAuB,wBAAwB4B;IAC/C5B,uBAAuB,oBAAoB6B;IAC3C7B,uBAAuB,qBAAqB8B,iBAAiBkF;IAC7DhH,uBAAuB,qBAAqB+B;IAC5C,qEAAqE;IACrE,sEAAsE;IACtE/B,uBAAuB,iBAAiB;QACtCsH,KAAK,OAAOC,UAAY,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGC,eAAe,CAACD;IACjF;IACAvH,uBAAuB,uBAAuBgC;IAC9ChC,uBAAuB,2BAA2BiC;IAClD,qEAAqE;IACrEjC,uBAAuB,4BAA4BiE;IACnD,2EAA2E;IAC3E,yEAAyE;IACzEjE,uBAAuB,yBAAyB4D,oBAAoB;QAAE6D,eAAe;IAAK;IAC1F,sEAAsE;IACtE,6BAA6B;IAC7B5D,2BAA2BC;IAC3B,qEAAqE;IACrE9D,uBAAuB,4BAA4BkE;IACnDlE,uBAAuB,oBAAoBkC;IAC3ClC,uBAAuB,oBAAoBmC;IAC3CnC,uBAAuB,qCAAqCoC;IAC5DpC,uBAAuB,oBAAoBiD,gBAAgB+D;IAC3DhH,uBAAuB,iBAAiBqC;IACxCrC,uBAAuB,wBAAwBsC;IAC/CtC,uBAAuB,mBAAmBkD;IAC1ClD,uBAAuB,gCAAgCmD;IACvDnD,uBAAuB,oBAAoBoD;IAC3C,wEAAwE;IACxE,qBAAqB;IACrBpD,uBAAuB,2BAA2BkF;IAClDlF,uBAAuB,sBAAsBuC;IAC7CvC,uBAAuB,sBAAsB0C;IAC7C1C,uBAAuB,oBAAoB2C;IAC3C3C,uBAAuB,qBAAqB4C;IAC5C,wDAAwD;IACxD5C,uBAAuB,sBAAsB6C;IAC7C7C,uBAAuB,uBAAuB8C;IAC9C9C,uBAAuB,oBAAoB+C;IAC3C/C,uBAAuB,uBAAuBgD;AAChD;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAAS0E;IACd,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,0CAA0C;IAC1CtH,0BAA0BkB;IAC1B,uEAAuE;IACvE,8EAA8E;IAC9EX;IACA,yEAAyE;IACzE,8EAA8E;IAC9E,uCAAuC;IACvCE;IACA,2EAA2E;IAC3ED;IACA,yEAAyE;IACzE,wEAAwE;IACxE,uEAAuE;IACvE,yBAAyB;IACzBH;IACA,wEAAwE;IACxE,uDAAuD;IACvDC;IACA,sEAAsE;IACtEI;IACA,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnEC,wBAAwBC,yBAAyB;QAAEuE,UAAU/E;IAAU;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,qEAAqE;IACrEU,sBAAsBC,uBAAuB;QAAEoE,UAAU/E;IAAU;IACnE,uEAAuE;IACvE,iEAAiE;IACjET,8BAA8BqB;IAC9B,4EAA4E;IAC5E,2EAA2E;IAC3E,uDAAuD;IACvDpB,uBAAuB,yBAAyBsD;IAChD,qEAAqE;IACrEtD,uBAAuB,mCAAmCuD;IAC1DvD,uBAAuB,oBAAoBqD;IAC3CrD,uBAAuB,wBAAwByD;IAC/C,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,wDAAwD;IACxDzD,uBAAuB,0BAA0B0D;IACjD,yEAAyE;IACzE,yEAAyE;IACzE,0CAA0C;IAC1C1D,uBAAuB,8BAA8B,OAAOmH,KAAKC,MAC/D,AAAC,CAAA,MAAM,MAAM,CAAC,uCAAmC,EAAGO,uBAAuB,CAACR,KAAKC;IAEnF,0EAA0E;IAC1E,0EAA0E;IAC1E,iBAAiB;IACjBpH,uBAAuB,+BAA+B2D;IACtD,6EAA6E;IAC7E,4EAA4E;IAC5E,iBAAiB;IACjB3D,uBAAuB,0BAA0B,OAAOmH,KAAKC,MAC3D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGQ,kBAAkB,CAACT,KAAKC;IAEpEpH,uBAAuB,2BAA2B,OAAOmH,KAAKC,MAC5D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGS,mBAAmB,CAACV,KAAKC;IAErE,iEAAiE;IACjE,uEAAuE;IACvE,yDAAyD;IACzDpH,uBAAuB,uBAAuB,OAAOmH,KAAKC,MACxD,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGU,gBAAgB,CAACX,KAAKC;IAErEpH,uBAAuB,iCAAiC,OAAOmH,KAAKC,MAClE,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGW,yBAAyB,CAACZ,KAAKC;IAE9E,qEAAqE;IACrE,sEAAsE;IACtE,gEAAgE;IAChEpH,uBAAuB,uBAAuB+D;IAC9C,0EAA0E;IAC1E,4EAA4E;IAC5E/D,uBAAuB,wBAAwB;QAAEsH,KAAKrG;IAAkB;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9EjB,uBAAuB,4BAA4B;QACjDsH,KAAK,OAAOC,UACV,AAAC,CAAA,MAAM,MAAM,CAAC,8BAA0B,EAAGS,qBAAqB,CAACT;IACrE;IACA,uEAAuE;IACvE,uEAAuE;IACvEvH,uBAAuB,kCAAkCwD;IACzD,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvExD,uBACE,6BACAwC;IAEFxC,uBAAuB,2BAA2ByC;IAClDzC,uBAAuB,wBAAwBgE;IAC/ChE,uBAAuB,sBAAsBmE;IAC7C,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,0EAA0E;IAC1E,oEAAoE;IACpEnE,uBAAuB,qBAAqBoE;IAC5CpE,uBACE,iDACA;QACEsH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGC,cAAc,CAACX,SAASU;IACpE,GACA;QAAEE,SAAS;IAAK;IAElBnI,uBACE,iDACA;QACEsH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGG,2BAA2B,CAACb,SAASU;IACjF,GACA;QAAEE,SAAS;IAAK;IAElB,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,oDAAoD;IACpDnI,uBAAuB,wBAAwBqE;IAC/CrE,uBAAuB,wBAAwBsE;IAC/CtE,uBAAuB,wBAAwBwE;IAC/C,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpExE,uBAAuB,sBAAsByE;IAC7C,kEAAkE;IAClEC;IACA,0EAA0E;IAC1E,4EAA4E;IAC5E,iDAAiD;IACjD1E,uBAAuB,6BAA6B,OAAOmH,KAAKC,MAC9D,AAAC,CAAA,MAAM,MAAM,CAAC,+BAA2B,EAAGiB,qBAAqB,CAAClB,KAAKC;IAEzE,4EAA4E;IAC5E,2EAA2E;IAC3E,QAAQ;IACRpH,uBAAuB,0CAA0CuE;IACjEvE,uBAAuB,8BAA8B2E;IACrD3E,uBAAuB,4BAA4B6E;IACnD7E,uBAAuB,mBAAmBgF;IAC1C,qEAAqE;IACrE,2DAA2D;IAC3DhF,uBAAuB,oBAAoBmF;IAC3C,yEAAyE;IACzE,kDAAkD;IAClDnF,uBAAuB,2BAA2BiF;IAClDjF,uBAAuB,4BAA4BqF;IACnD,qEAAqE;IACrE,kCAAkC;IAClCrF,uBAAuB,oCAAoC,OAAOmH,KAAKC,MACrE,AAAC,CAAA,MAAM,MAAM,CAAC,sCAAkC,EAAGkB,4BAA4B,CAACnB,KAAKC;IAEvF,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtEpH,uBACE,gCACA;QACEsH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGM,gBAAgB,CAAChB,SAASU;IACrE,GACA;QAAEE,SAAS;IAAK;IAElB,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpEnI,uBACE,iCACA;QACEsH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGO,iBAAiB,CAACjB,SAASU;IACvE,GACA;QAAEE,SAAS;IAAK;IAElB,uEAAuE;IACvE,mCAAmC;IACnCnI,uBAAuB,gCAAgC,OAAOmH,KAAKC,MACjE,AAAC,CAAA,MAAM,MAAM,CAAC,kCAA8B,EAAGqB,yBAAyB,CAACtB,KAAKC;IAEhF,qEAAqE;IACrE,yEAAyE;IACzE,uDAAuD;IACvD/F,2BAA2B,IAAMd,cAAcmI,GAAG,GAAGC,SAAS;AAChE;AAEA,6DAA6D;AAC7D,SAASC,iBAAiB,QAAQ,uBAAmB;AAErD,mEAAmE;AACnE,yDAAyD;AACzD,cAAc,yBAAqB"}
+{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n\n/**\n * Server half of the commerce plugin (AGL-396): the site-facing storefront\n * API handlers, registered with the plugin API registry and served by the\n * tenant dispatcher at their unchanged `/api/commerce/*` URLs. This module\n * pulls in firebase-admin + Stripe, so it is NOT re-exported from the client\n * barrel — apps import `@aglyn/plugins-commerce/server` only from their\n * (server-only) API dispatcher registration.\n */\n\nimport {\n  registerBillingWebhookHandler,\n  registerPluginApiRoute,\n  registerPluginJob,\n  registerSitePageEnricher,\n  registerSitePageResolver,\n  registerPluginPermissions,\n  registerPluginConfigSchema,\n} from '@aglyn/aglyn/server'\nimport { isEmailConfigured } from '@aglyn/shared-util-email'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { registerCommerceMediaPublishGuard } from './server/media-publish-guard'\nimport { registerCommerceRecurringCharges } from './server/recurring-charges'\nimport { registerProductCardReader } from './server/product-card'\nimport { registerProductAiCapability } from './server/product-ai-capability'\nimport { registerStoreSetupAiCapabilities } from './server/store-setup-ai-capability'\nimport { registerStoreSetupAiWriter } from './server/store-setup-ai-writer.console'\nimport { registerProductDraftWriter } from './server/product-drafts'\nimport { registerCommerceTaxProfile } from './server/tax-profile'\nimport { registerTaxReturnSource } from '@aglyn/aglyn/plugin-manager/plugin-tax-return-sources'\nimport { commerceTaxReturnSource } from './server/tax-return-source'\nimport { taxSummaryHandler } from './server/tax-summary'\nimport { registerRevenueSource } from '@aglyn/aglyn/plugin-manager/plugin-revenue-sources'\nimport { commerceRevenueSource } from './server/revenue-source'\nimport { commerceBillingWebhookHandler } from './server/billing-webhook'\nimport { registerOrderFigureReaders } from './server/order-figures'\nimport { COMMERCE_PERMISSIONS } from './model/plugin-permissions'\nimport { COMMERCE_CONFIG_SCHEMA } from './plugin-config'\nimport { commerceSitePageEnricher } from './server/site-page-enricher'\nimport { commerceSitePageResolver } from './server/site-page-resolver'\nimport { cartCheckoutHandler } from './server/cart-checkout'\nimport { cartHandler } from './server/cart'\nimport { cartExtrasHandler } from './server/checkout-extras'\nimport { catalogHandler } from './server/catalog'\nimport { checkoutHandler } from './server/checkout'\nimport { downloadHandler } from './server/download'\nimport { newsletterHandler } from './server/newsletter'\nimport { notifyRestockHandler } from './server/notify-restock'\nimport { productHandler } from './server/product'\nimport { relatedHandler } from './server/related'\nimport { reservationAvailabilityHandler } from './server/reservation-availability'\nimport { gateHandler } from './server/gate'\nimport { memberFeedHandler } from './server/member-feed'\nimport { membershipAccountHandler } from './server/membership-account'\nimport { membershipAdminPasswordHandler } from './server/membership-admin-password'\nimport { membershipAdminRemoveHandler } from './server/membership-admin-remove'\nimport { membershipContentHandler } from './server/membership-content'\nimport { membershipLoginHandler } from './server/membership-login'\nimport { membershipLogoutHandler } from './server/membership-logout'\nimport { membershipRecoverHandler } from './server/membership-recover'\nimport { membershipRegisterHandler } from './server/membership-register'\nimport { membershipResetHandler } from './server/membership-reset'\nimport { membershipWishlistHandler } from './server/membership-wishlist'\nimport { reserveHandler } from './server/reserve'\nimport { streamHandler } from './server/stream'\nimport { subscriptionPortalHandler } from './server/subscription-portal'\nimport { reviewsHandler } from './server/reviews'\nimport { connectHandler } from './server/connect'\nimport { cancelOrderHandler } from './server/cancel-order'\nimport { carrierRatesAvailabilityHandler } from './server/carrier-rates-availability'\nimport { collectionMembershipHandler } from './server/collection-membership'\nimport { draftOrderHandler } from './server/draft-order'\nimport { fulfillOrderHandler } from './server/fulfill-order'\nimport { orderReceiptSendHandler } from './server/order-receipt-send'\nimport { orderStatusHandler, registerOrderStatusActions } from './server/order-status'\nimport { returnRequestStatusAction } from './server/return-status-action'\nimport { giftCardsHandler } from './server/gift-cards'\nimport { memberPostHandler } from './server/member-post'\nimport { orderAnalyticsHandler } from './server/order-analytics'\nimport { checkoutStatusHandler } from './server/checkout-status'\nimport { posOrderHandler } from './server/pos-order'\nimport { printersHandler } from './server/printers'\nimport { posPaymentHandler } from './server/pos-payment'\nimport { posReadersHandler } from './server/pos-readers'\nimport { posTerminalConnectionTokenHandler } from './server/pos-terminal-connection-token'\nimport { posDisplayHandler } from './server/pos-display'\nimport { posKioskHandler } from './server/pos-kiosk'\nimport { registerPosOpsRoutes } from './server/pos-ops-routes'\nimport {\n  processAbandonedHandler,\n  scanAbandonedCheckouts,\n} from './server/process-abandoned'\nimport { processRestockHandler, scanRestockAlerts } from './server/process-restock'\nimport { scanStockDecrements } from './server/reconcile-stock'\nimport { refundHandler } from './server/refund'\nimport { orderWebhooksHandler } from './server/order-webhooks'\nimport { returnRequestHandler, returnsHandler } from './server/returns'\nimport { scanSupplierDeliveries } from './server/supplier-outbox'\nimport { supplierUpdateHandler } from './server/supplier-update'\n\n/**\n * The two commerce beats (AGL-2227).\n *\n * `commerce/process-abandoned` and `commerce/process-restock` have existed\n * since AGL-323/326 as `x-cron-secret` HTTP doors, and `registerCommerceConsoleApi`\n * below has called them \"the scheduler-driven jobs\" in a comment that whole\n * time. **Nothing scheduled them.** Not `scheduled-crons.yml` (its table names\n * 11 paths; neither of these), not `vercel.json` (no `crons` key at all), not\n * `registerPluginJob` — the only two registrations in the repo were scheduled\n * publishing and the bookings hold-expiry.\n *\n * The cost was a Pro-tier entitlement (`abandonedCart`) that had never sent an\n * email, and a storefront \"notify me when it's back\" form writing into a queue\n * with no drain. AGL-1793 had already added the collection-group indexes these\n * two scans need, which is the clearest evidence they were always meant to run.\n *\n * Module scope, like the bookings job beside it: the runner route reaches jobs\n * through `ensureAll(['tenantApi'])`, and a registration inside a `register*`\n * function would depend on which entry point happened to be loaded.\n *\n * 15 minutes, not 1: `process-abandoned` will not remind a checkout younger\n * than an hour and `process-restock` only mails alerts whose product already\n * has stock, so a tighter beat buys nothing and costs two collection-group\n * scans a minute. Both are bounded (200 docs) and idempotent — each pass\n * stamps what it sent — so an overlapping or repeated beat cannot double-send.\n */\nconst RECOVERY_JOB_INTERVAL_MINUTES = 15\n\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'abandoned-checkout-recovery',\n  intervalMinutes: RECOVERY_JOB_INTERVAL_MINUTES,\n  description:\n    'Email one recovery reminder per stalled checkout (abandonedCart plans).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    // Quietly, not as an error: email is optional per deployment, and a beat\n    // that logs every minute on a self-host without Resend buries everything\n    // else in the log.\n    if (!isEmailConfigured()) return\n    const { sent } = await scanAbandonedCheckouts(gate)\n    if (sent) console.info(`commerce: sent ${sent} abandoned-cart reminders`)\n  },\n})\n\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'back-in-stock-alerts',\n  intervalMinutes: RECOVERY_JOB_INTERVAL_MINUTES,\n  description: 'Email shoppers whose requested product is in stock again.',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!isEmailConfigured()) return\n    const { sent } = await scanRestockAlerts(gate)\n    if (sent) console.info(`commerce: sent ${sent} back-in-stock alerts`)\n  },\n})\n\n/**\n * The review-request email (AGL-3736). HOURLY: a request is owed days after\n * fulfilment, so an hour's lateness is invisible, and the scan is one\n * collection-group range query over `reviewRequestDueAtMs` — a field only\n * orders still owed a request carry, so an empty beat costs one read.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'review-request-emails',\n  intervalMinutes: 60,\n  description:\n    'Email each buyer one review request, with a single-use link per product, ' +\n    'days after their order is fulfilled (AGL-3736).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!isEmailConfigured()) return\n    const { scanReviewRequests } = await import('./server/review-requests')\n    const { sent } = await scanReviewRequests(gate)\n    if (sent) console.info(`commerce: sent ${sent} review requests`)\n  },\n})\n\n/**\n * The missing-decrement detector (AGL-2358).\n *\n * HOURLY, not on the 15-minute recovery beat: it is a detector for a rare\n * process death, not a queue drain, and nothing it finds gets less true for\n * waiting an hour. The cost of the beat is what sets the interval — one\n * collection-group read of the platform's most recent orders, plus two\n * queries per host that has any — and an hour keeps that off the same tick as\n * the two scans above.\n *\n * NOT gated on `isEmailConfigured()`, unlike its two neighbours. Those send\n * mail; this writes a console notification and a log line, both of which work\n * on a self-host with no mail provider at all — and a stock count that is\n * silently wrong is exactly what a self-hoster least wants suppressed by a\n * setting about email.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'stock-decrement-reconciliation',\n  intervalMinutes: 60,\n  description:\n    'Report paid orders whose stock decrement never landed (AGL-2358).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    const scan = await scanStockDecrements(gate)\n    if (scan.missingLines || scan.truncatedHosts) {\n      console.warn(\n        `commerce: ${scan.missingLines} order lines across ${scan.hosts} ` +\n          `sites have no sale ledger row (${scan.reportedOrders} newly ` +\n          `reported, ${scan.truncatedHosts} sites' ledger window truncated)`,\n      )\n    }\n  },\n})\n\n/**\n * The dropship supplier outbox drain (AGL-2473).\n *\n * EVERY MINUTE, unlike the three above, and the interval is the point rather\n * than an oversight. This is the only one of the four that a BUYER is waiting\n * on: the row it drains is a paid order that has not been routed to whoever\n * ships it, and every minute it sits is a minute the parcel is not moving. The\n * first backoff step is also 60s, so a supplier that blipped is retried on the\n * next tick.\n *\n * The cost that set fifteen minutes for the recovery pair does not apply. Those\n * are collection-GROUP scans across every site on the platform; this is one\n * ordinary equality query against a top-level collection that is EMPTY in the\n * ordinary case — an empty result bills a single read, so the whole beat is\n * ~1,440 reads a day whether or not anyone is dropshipping.\n *\n * Not gated on `isEmailConfigured()`. The supplier notification is an HTTP POST\n * to the merchant's own supplier, and a self-host with no mail provider still\n * has dropship orders to route.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'supplier-webhook-delivery',\n  intervalMinutes: 1,\n  description:\n    'Deliver queued dropship supplier notifications, with backoff and a ' +\n    'dead letter that tells the merchant (AGL-2473).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    const scan = await scanSupplierDeliveries(gate)\n    if (scan.deadLettered) {\n      console.warn(\n        `commerce: ${scan.deadLettered} dropship orders could not be routed ` +\n          `to their supplier and have been reported on the order`,\n      )\n    }\n  },\n})\n\n/**\n * Stripe payment method domains for every connected custom domain (AGL-3629).\n *\n * The backfill for domains connected before registration existed, and the\n * repair for a connect whose event was lost, in one daily pass. A domain\n * already registered costs a document read and no Stripe call, so the beat is\n * cheap; a day's delay costs only the Apple Pay button on a domain connected\n * while Stripe was unreachable, and the first in-page checkout there registers\n * it anyway.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'payment-method-domains',\n  intervalMinutes: 24 * 60,\n  description:\n    'Register connected custom domains with Stripe so Apple Pay, Google Pay ' +\n    'and Link show on them (AGL-3629).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!process.env.STRIPE_SECRET_KEY) return\n    const { reconcileCustomDomains } = await import('./server/payment-method-domains')\n    const result = await reconcileCustomDomains(gate)\n    if (result.registered || result.failed) {\n      console.info(\n        `commerce: payment method domains — ${result.registered} registered, ` +\n          `${result.failed} failed across ${result.hosts} sites`,\n      )\n    }\n  },\n})\n\n/**\n * A visitor's payment door: it opens a Stripe Checkout Session for whoever\n * calls it, so the dispatcher holds it to the card-testing counters\n * (AGL-3363). Declared here, beside the registration, so the door cannot\n * exist without it.\n */\nconst CARD_PAYMENT_DOOR = { cardPayment: true } as const\n\n/** Registers the commerce plugin's storefront API routes. */\nexport function registerCommerceApi(): void {\n  registerProductCardReader()\n  // The merchant's tax rule, for every plugin that prices a charge here.\n  registerCommerceTaxProfile()\n  registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // Merchant-settable register discount ceiling (AGL-2161). Registered on\n  // BOTH surfaces, like the permissions above: the POS route reads it\n  // server-side, and the settings card renders it from the same schema.\n  registerPluginConfigSchema(COMMERCE_CONFIG_SCHEMA)\n  // PDP/PLP template pages (AGL-418): /products/* + /collections/*.\n  registerSitePageResolver(commerceSitePageResolver)\n  // Seeds product grids on ordinary screens (AGL-659) — the resolver above\n  // only covers /products/* and /collections/*, so /products itself, and any\n  // designed page with a grid on it, needed this to render server-side.\n  registerSitePageEnricher(commerceSitePageEnricher)\n  registerPluginApiRoute('commerce/cart-checkout', cartCheckoutHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/cart', cartHandler)\n  // What the cart offers besides shipping (AGL-3624): pickup locations, and\n  // local delivery's fee, minimum and windows for a postal code.\n  registerPluginApiRoute('commerce/local-fulfillment-options', async (req, res) =>\n    (await import('./server/local-fulfillment')).localFulfillmentOptionsHandler(req, res),\n  )\n  // Optional lines another plugin offers at the cart (AGL-3635).\n  registerPluginApiRoute('commerce/cart-extras', cartExtrasHandler)\n  registerPluginApiRoute('commerce/catalog', catalogHandler)\n  registerPluginApiRoute('commerce/checkout', checkoutHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/download', downloadHandler)\n  // The pre-channels Google feed address (AGL-299), now written by the\n  // catalog's feed publisher (AGL-3637); the module loads with a fetch.\n  registerPluginApiRoute('commerce/feed', {\n    web: async (request) => (await import('./server/legacy-feed')).legacyFeedRoute(request),\n  })\n  registerPluginApiRoute('commerce/newsletter', newsletterHandler)\n  registerPluginApiRoute('commerce/notify-restock', notifyRestockHandler)\n  // GA-safe order projection for the storefront `purchase` (AGL-1641).\n  registerPluginApiRoute('commerce/order-analytics', orderAnalyticsHandler)\n  // The guest order-status page's data (AGL-3610), behind the signed link in\n  // every buyer email — a recipient link, so it outlives the site's gates.\n  registerPluginApiRoute('commerce/order-status', orderStatusHandler, { recipientLink: true })\n  // …and its \"Request a return\" button (AGL-3611), on an order that can\n  // still send something back.\n  registerOrderStatusActions(returnRequestStatusAction)\n  // What became of a session the shopper was returned from (AGL-3606).\n  registerPluginApiRoute('commerce/checkout-status', checkoutStatusHandler)\n  registerPluginApiRoute('commerce/product', productHandler)\n  registerPluginApiRoute('commerce/related', relatedHandler)\n  registerPluginApiRoute('commerce/reservation-availability', reservationAvailabilityHandler)\n  registerPluginApiRoute('commerce/reserve', reserveHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/gate', gateHandler)\n  registerPluginApiRoute('commerce/member-feed', memberFeedHandler)\n  registerPluginApiRoute('commerce/stream', streamHandler)\n  registerPluginApiRoute('commerce/subscription-portal', subscriptionPortalHandler)\n  registerPluginApiRoute('commerce/reviews', reviewsHandler)\n  // A buyer's return request (AGL-3611), from their account or the signed\n  // order-status link.\n  registerPluginApiRoute('commerce/return-request', returnRequestHandler)\n  registerPluginApiRoute('membership/account', membershipAccountHandler)\n  registerPluginApiRoute('membership/content', membershipContentHandler)\n  registerPluginApiRoute('membership/login', membershipLoginHandler)\n  registerPluginApiRoute('membership/logout', membershipLogoutHandler)\n  // Password recovery pair (AGL-552): request + complete.\n  registerPluginApiRoute('membership/recover', membershipRecoverHandler)\n  registerPluginApiRoute('membership/register', membershipRegisterHandler)\n  registerPluginApiRoute('membership/reset', membershipResetHandler)\n  registerPluginApiRoute('membership/wishlist', membershipWishlistHandler)\n}\n\n/**\n * Registers the commerce plugin's console-side API routes (AGL-396):\n * merchant/staff operations (Connect onboarding, refunds, draft & POS\n * orders, member posts), the supplier tracking callback, and the HTTP doors\n * for the abandoned-cart / restock passes.\n *\n * Those last two are NOT what schedules them — the `registerPluginJob` calls\n * above are (AGL-2227). This comment used to call them \"the scheduler-driven\n * jobs\", which is how they stayed dark for months: it asserted the wiring\n * instead of having it.\n */\nexport function registerCommerceConsoleApi(): void {\n  // The register's gate (`managePos`) is resolved on THIS surface: every POS\n  // route below runs in the console, and a key no surface registered here is\n  // absent from the resolved map, which reads as refused — the site's own\n  // owner was answered 403 at the register.\n  registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // What a product looks like to a surface that is not this plugin's — a\n  // campaign email that features one asks here rather than importing the model.\n  registerProductCardReader()\n  // …and a draft product another plugin asks for by name (AGL-3616): an AI\n  // build setting a store up from a brief, unpriced unless the brief priced it.\n  // The console runs AI jobs (AGL-3026).\n  registerProductDraftWriter()\n  // …and the operation an AI build plans for it, which that writer executes.\n  registerProductAiCapability()\n  // …and the store's shipping, pickup, local delivery and tax settings an AI\n  // build sets up (AGL-3749), written live as the console's cards write them,\n  // with the four operations that writer executes.\n  registerStoreSetupAiWriter()\n  registerStoreSetupAiCapabilities()\n  // …and why a file somebody is SELLING may not be made public (AGL-3080).\n  // The media library asks before it hands an asset its permanent CDN URL\n  // back; what a product is, and which of its fields hold paid media, is\n  // this plugin's to know.\n  registerCommerceMediaPublishGuard()\n  // …and which memberships a site sells, for a security lockdown to pause\n  // (AGL-3364). The lockdown route runs on this surface.\n  registerCommerceRecurringCharges()\n  // …and the tax rule, for the webhook that confirms what they charged.\n  registerCommerceTaxProfile()\n  // …and its sales on the operator's own sales tax return (AGL-3080): the\n  // tax a storefront checkout collected under the platform's registrations.\n  // The staff return awaits this surface before it asks, and refuses to be\n  // filed without this source — commerce declares `taxReturnSource`.\n  registerTaxReturnSource(commerceTaxReturnSource, { pluginId: BUNDLE_ID })\n  // …and the take its orders earn the operator, on the staff revenue report\n  // (AGL-3080) — commerce declares `revenueSource`, so the report names this\n  // source as unread rather than counting it as zero if it is missing.\n  registerRevenueSource(commerceRevenueSource, { pluginId: BUNDLE_ID })\n  // Stripe webhook sections (AGL-418): orders/carts/drafts/reservations/\n  // subscriptions ride the platform webhook via the hook registry.\n  registerBillingWebhookHandler(commerceBillingWebhookHandler)\n  // Cancel + stock release in one transaction (AGL-1808). Server-side because\n  // the release depends on the transition rule, and a client write could not\n  // re-ask it under the same lock that flips the status.\n  registerPluginApiRoute('commerce/cancel-order', cancelOrderHandler)\n  // Whether live carrier rates can be offered on this site (AGL-3612).\n  registerPluginApiRoute('commerce/shipping/carrier-rates', carrierRatesAvailabilityHandler)\n  registerPluginApiRoute('commerce/connect', connectHandler)\n  registerPluginApiRoute('commerce/draft-order', draftOrderHandler)\n  // Fulfil + mark-delivered with the transition re-asked under the write\n  // (AGL-1819) — the same stale-dialog hole cancel-order closes, minus the\n  // stock release those two transitions never had. The customer REST API's\n  // `PATCH /v1/sites/{id}/orders/{id}` records a shipment through the same\n  // transaction (`server/api-v1/orders-and-products.ts`).\n  registerPluginApiRoute('commerce/fulfill-order', fulfillOrderHandler)\n  // Pickup and local delivery steps (AGL-3624) — ready, picked up, out for\n  // delivery, delivered — from the console queue, the order dialog and the\n  // native Aglyn app. Loaded on first call.\n  registerPluginApiRoute('commerce/local-fulfillment', async (req, res) =>\n    (await import('./server/local-fulfillment-status')).localFulfillmentHandler(req, res),\n  )\n  // \"Resend receipt\" from the order dialog (AGL-3610): by email, or by text\n  // when the platform's SMS provider is configured. Rate-limited per member\n  // and per order.\n  registerPluginApiRoute('commerce/order-receipt-send', orderReceiptSendHandler)\n  // The product editor's save and Adjust stock for the native apps (AGL-3652):\n  // the console's own product-write computation under the rules' gate. Loaded\n  // on first call.\n  registerPluginApiRoute('commerce/products/save', async (req, res) =>\n    (await import('./server/products-write')).productSaveHandler(req, res),\n  )\n  registerPluginApiRoute('commerce/products/stock', async (req, res) =>\n    (await import('./server/products-write')).productStockHandler(req, res),\n  )\n  // The order dialog's note and restock answer for the native apps\n  // (AGL-3651, AGL-3652): the console's own timeline computation, in one\n  // transaction on the stored order. Loaded on first call.\n  registerPluginApiRoute('commerce/order-note', async (req, res) =>\n    (await import('./server/order-annotations')).orderNoteHandler(req, res),\n  )\n  registerPluginApiRoute('commerce/order-restock-answer', async (req, res) =>\n    (await import('./server/order-annotations')).orderRestockAnswerHandler(req, res),\n  )\n  // Issue / void store credit (AGL-2226). Server-side because the host\n  // catch-all in the Firestore rules would otherwise let a client write\n  // its own `balanceCents`, which checkout applies as amount-off.\n  registerPluginApiRoute('commerce/gift-cards', giftCardsHandler)\n  // The merchant's own storefront sales tax, by who owes it (AGL-2440): the\n  // same rows and classifier the operator's return reads, fenced to one site.\n  registerPluginApiRoute('commerce/tax-summary', { web: taxSummaryHandler })\n  // The payment methods card (AGL-3629): toggles, the platform's offer, the\n  // payout account's capabilities and the site's wallet domains. Loaded with\n  // the first request, so a console that never opens Settings never imports it.\n  registerPluginApiRoute('commerce/payment-methods', {\n    web: async (request) =>\n      (await import('./server/payment-methods')).paymentMethodsHandler(request),\n  })\n  // A smart collection's rules changed or it was deleted: re-stamp which\n  // products it holds (AGL-3321), the membership the storefront queries.\n  registerPluginApiRoute('commerce/collection-membership', collectionMembershipHandler)\n  // A site member's password help (AGL-914) and removal (AGL-3308), from the\n  // Users page drawer and the Inbox. Console-auth, not the visitor cookie the\n  // storefront's `membership/*` routes take, so they are served where the\n  // console posts: the console's own dispatcher loads this surface only.\n  registerPluginApiRoute(\n    'membership/admin-password',\n    membershipAdminPasswordHandler,\n  )\n  registerPluginApiRoute('membership/admin-remove', membershipAdminRemoveHandler)\n  registerPluginApiRoute('commerce/member-post', memberPostHandler)\n  registerPluginApiRoute('commerce/pos-order', posOrderHandler)\n  // A register's cloud receipt printers and the jobs a manager sends them\n  // (AGL-3619), and the two doors the printers themselves poll. The doors are\n  // MACHINE routes: a printer is no member and names no site cookie, so it\n  // authenticates with the per-printer secret in its URL and its own device id,\n  // and the route asks the plan before it hands over a job. Loaded with the\n  // first poll, so a console that has no printers never imports them.\n  registerPluginApiRoute('commerce/printers', printersHandler)\n  registerPluginApiRoute(\n    'commerce/cloudprnt/:hostId/:printerId/:secret',\n    {\n      web: async (request, context) =>\n        (await import('./server/printer-poll')).cloudPrntRoute(request, context),\n    },\n    { machine: true },\n  )\n  registerPluginApiRoute(\n    'commerce/epson-sdp/:hostId/:printerId/:secret',\n    {\n      web: async (request, context) =>\n        (await import('./server/printer-poll')).epsonServerDirectPrintRoute(request, context),\n    },\n    { machine: true },\n  )\n  // The register's tenders against an open sale, its Stripe Terminal card\n  // readers, and the paired customer display (AGL-3607, AGL-3608). The\n  // display's `pair`/`poll`/`respond` take a display token and no console\n  // session; every other action is gated like a sale.\n  registerPluginApiRoute('commerce/pos-payment', posPaymentHandler)\n  registerPluginApiRoute('commerce/pos-readers', posReadersHandler)\n  registerPluginApiRoute('commerce/pos-display', posDisplayHandler)\n  // The self-service kiosk (AGL-3623): a register's paired screen where the\n  // customer orders and pays. Its device token, never a staff session; the\n  // register's queue of \"pay at counter\" orders is gated like a sale.\n  registerPluginApiRoute('commerce/pos-kiosk', posKioskHandler)\n  // Shifts, staff PINs, the customer lookup and returns (AGL-3609).\n  registerPosOpsRoutes()\n  // The offline register (AGL-3625): the kit a register caches to sell cash\n  // while the connection is down, and the sync that records those sales once.\n  // Gated like a sale; loaded with its first call.\n  registerPluginApiRoute('commerce/pos-offline-sync', async (req, res) =>\n    (await import('./server/pos-offline-sync')).posOfflineSyncHandler(req, res),\n  )\n  // The native Aglyn POS app's Stripe Terminal SDK: a connection token scoped\n  // to the site's Location, and the Location itself (AGL-3618). Gated like a\n  // sale.\n  registerPluginApiRoute('commerce/pos-terminal-connection-token', posTerminalConnectionTokenHandler)\n  registerPluginApiRoute('commerce/process-abandoned', processAbandonedHandler)\n  registerPluginApiRoute('commerce/process-restock', processRestockHandler)\n  registerPluginApiRoute('commerce/refund', refundHandler)\n  // Returns (AGL-3611): approve, decline, receive with restock, refund\n  // through the route above, a label from a shipping plugin.\n  registerPluginApiRoute('commerce/returns', returnsHandler)\n  // The merchant's outbound order webhooks (AGL-3611): endpoints, secrets,\n  // a test ping and a resend from the delivery log.\n  registerPluginApiRoute('commerce/order-webhooks', orderWebhooksHandler)\n  registerPluginApiRoute('commerce/supplier-update', supplierUpdateHandler)\n  // Stamps the open orders that predate the shipping fields, before an\n  // export for shipping (AGL-3613).\n  registerPluginApiRoute('commerce/orders-shipping-prepare', async (req, res) =>\n    (await import('./server/orders-shipping-prepare')).ordersShippingPrepareHandler(req, res),\n  )\n  // ShipStation's Custom Store endpoint (AGL-3613): ShipStation's servers\n  // pull the order feed and post shipments back with the site's own Basic\n  // credentials, so it is a MACHINE's route and asks the site's commerce,\n  // plan, release and lockdown gates itself once the credentials prove the\n  // site. Loaded on its first call, never with the console API surface.\n  registerPluginApiRoute(\n    'commerce/shipstation/:hostId',\n    {\n      web: async (request, context) =>\n        (await import('./server/shipstation')).shipStationRoute(request, context),\n    },\n    { machine: true },\n  )\n  // ShippingEasy's shipment callback (AGL-3633): ShippingEasy's servers post\n  // each label bought for an order this store sent them, signed with the\n  // merchant's own API secret, so it is a MACHINE's route like ShipStation's\n  // above and asks the same gates once the signature proves the site.\n  registerPluginApiRoute(\n    'commerce/shippingeasy/:hostId',\n    {\n      web: async (request, context) =>\n        (await import('./server/shippingeasy')).shippingEasyRoute(request, context),\n    },\n    { machine: true },\n  )\n  // The ShipStation and ShippingEasy cards' connect, show, new password,\n  // send open orders and disconnect.\n  registerPluginApiRoute('commerce/shipping-connectors', async (req, res) =>\n    (await import('./server/shipping-connectors')).shippingConnectorsHandler(req, res),\n  )\n  // The store's sales as figure tables (AGL-2915), for the AI plugin's\n  // insights to read by id rather than by reading orders. The console runs\n  // insight jobs, so the console surface registers them.\n  registerOrderFigureReaders(() => firebaseAdmin.app().firestore())\n}\n\n// Shared with the (still app-side) membership/account route.\nexport { mintDownloadToken } from './server/download'\n\n// Site-member session primitives, shared with the (still app-side)\n// membership/* routes until those migrate too (AGL-396).\nexport * from './server/membership'\n\n// Type-only (AGL-3080): the plugin's entitlement keys, declared by module\n// augmentation, for every program that loads this entry point.\nexport type { commercePlanEntitlements } from './plan-entitlements'\n"],"names":["registerBillingWebhookHandler","registerPluginApiRoute","registerPluginJob","registerSitePageEnricher","registerSitePageResolver","registerPluginPermissions","registerPluginConfigSchema","isEmailConfigured","firebaseAdmin","BUNDLE_ID","registerCommerceMediaPublishGuard","registerCommerceRecurringCharges","registerProductCardReader","registerProductAiCapability","registerStoreSetupAiCapabilities","registerStoreSetupAiWriter","registerProductDraftWriter","registerCommerceTaxProfile","registerTaxReturnSource","commerceTaxReturnSource","taxSummaryHandler","registerRevenueSource","commerceRevenueSource","commerceBillingWebhookHandler","registerOrderFigureReaders","COMMERCE_PERMISSIONS","COMMERCE_CONFIG_SCHEMA","commerceSitePageEnricher","commerceSitePageResolver","cartCheckoutHandler","cartHandler","cartExtrasHandler","catalogHandler","checkoutHandler","downloadHandler","newsletterHandler","notifyRestockHandler","productHandler","relatedHandler","reservationAvailabilityHandler","gateHandler","memberFeedHandler","membershipAccountHandler","membershipAdminPasswordHandler","membershipAdminRemoveHandler","membershipContentHandler","membershipLoginHandler","membershipLogoutHandler","membershipRecoverHandler","membershipRegisterHandler","membershipResetHandler","membershipWishlistHandler","reserveHandler","streamHandler","subscriptionPortalHandler","reviewsHandler","connectHandler","cancelOrderHandler","carrierRatesAvailabilityHandler","collectionMembershipHandler","draftOrderHandler","fulfillOrderHandler","orderReceiptSendHandler","orderStatusHandler","registerOrderStatusActions","returnRequestStatusAction","giftCardsHandler","memberPostHandler","orderAnalyticsHandler","checkoutStatusHandler","posOrderHandler","printersHandler","posPaymentHandler","posReadersHandler","posTerminalConnectionTokenHandler","posDisplayHandler","posKioskHandler","registerPosOpsRoutes","processAbandonedHandler","scanAbandonedCheckouts","processRestockHandler","scanRestockAlerts","scanStockDecrements","refundHandler","orderWebhooksHandler","returnRequestHandler","returnsHandler","scanSupplierDeliveries","supplierUpdateHandler","RECOVERY_JOB_INTERVAL_MINUTES","pluginId","name","intervalMinutes","description","lockdown","scope","handler","gate","sent","console","info","scanReviewRequests","scan","missingLines","truncatedHosts","warn","hosts","reportedOrders","deadLettered","process","env","STRIPE_SECRET_KEY","reconcileCustomDomains","result","registered","failed","CARD_PAYMENT_DOOR","cardPayment","registerCommerceApi","req","res","localFulfillmentOptionsHandler","web","request","legacyFeedRoute","recipientLink","registerCommerceConsoleApi","localFulfillmentHandler","productSaveHandler","productStockHandler","orderNoteHandler","orderRestockAnswerHandler","paymentMethodsHandler","context","cloudPrntRoute","machine","epsonServerDirectPrintRoute","posOfflineSyncHandler","ordersShippingPrepareHandler","shipStationRoute","shippingEasyRoute","shippingConnectorsHandler","app","firestore","mintDownloadToken"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD;;;;;;;CAOC,GAED,SACEA,6BAA6B,EAC7BC,sBAAsB,EACtBC,iBAAiB,EACjBC,wBAAwB,EACxBC,wBAAwB,EACxBC,yBAAyB,EACzBC,0BAA0B,QACrB,sBAAqB;AAC5B,SAASC,iBAAiB,QAAQ,2BAA0B;AAC5D,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,iCAAiC,QAAQ,kCAA8B;AAChF,SAASC,gCAAgC,QAAQ,gCAA4B;AAC7E,SAASC,yBAAyB,QAAQ,2BAAuB;AACjE,SAASC,2BAA2B,QAAQ,oCAAgC;AAC5E,SAASC,gCAAgC,QAAQ,wCAAoC;AACrF,SAASC,0BAA0B,QAAQ,4CAAwC;AACnF,SAASC,0BAA0B,QAAQ,6BAAyB;AACpE,SAASC,0BAA0B,QAAQ,0BAAsB;AACjE,SAASC,uBAAuB,QAAQ,wDAAuD;AAC/F,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,qBAAqB,QAAQ,qDAAoD;AAC1F,SAASC,qBAAqB,QAAQ,6BAAyB;AAC/D,SAASC,6BAA6B,QAAQ,8BAA0B;AACxE,SAASC,0BAA0B,QAAQ,4BAAwB;AACnE,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,sBAAsB,QAAQ,qBAAiB;AACxD,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,WAAW,QAAQ,mBAAe;AAC3C,SAASC,iBAAiB,QAAQ,8BAA0B;AAC5D,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,iBAAiB,QAAQ,yBAAqB;AACvD,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,8BAA8B,QAAQ,uCAAmC;AAClF,SAASC,WAAW,QAAQ,mBAAe;AAC3C,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,8BAA8B,QAAQ,wCAAoC;AACnF,SAASC,4BAA4B,QAAQ,sCAAkC;AAC/E,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,aAAa,QAAQ,qBAAiB;AAC/C,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SAASC,+BAA+B,QAAQ,yCAAqC;AACrF,SAASC,2BAA2B,QAAQ,oCAAgC;AAC5E,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,uBAAuB,QAAQ,iCAA6B;AACrE,SAASC,kBAAkB,EAAEC,0BAA0B,QAAQ,2BAAuB;AACtF,SAASC,yBAAyB,QAAQ,mCAA+B;AACzE,SAASC,gBAAgB,QAAQ,yBAAqB;AACtD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,qBAAqB,QAAQ,8BAA0B;AAChE,SAASC,qBAAqB,QAAQ,8BAA0B;AAChE,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,iCAAiC,QAAQ,4CAAwC;AAC1F,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SACEC,uBAAuB,EACvBC,sBAAsB,QACjB,gCAA4B;AACnC,SAASC,qBAAqB,EAAEC,iBAAiB,QAAQ,8BAA0B;AACnF,SAASC,mBAAmB,QAAQ,8BAA0B;AAC9D,SAASC,aAAa,QAAQ,qBAAiB;AAC/C,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SAASC,oBAAoB,EAAEC,cAAc,QAAQ,sBAAkB;AACvE,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,qBAAqB,QAAQ,8BAA0B;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GACD,MAAMC,gCAAgC;AAEtCvF,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiBH;IACjBI,aACE;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,yEAAyE;QACzE,yEAAyE;QACzE,mBAAmB;QACnB,IAAI,CAAC1F,qBAAqB;QAC1B,MAAM,EAAE2F,IAAI,EAAE,GAAG,MAAMnB,uBAAuBkB;QAC9C,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,yBAAyB,CAAC;IAC1E;AACF;AAEAhG,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiBH;IACjBI,aAAa;IACbC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAAC1F,qBAAqB;QAC1B,MAAM,EAAE2F,IAAI,EAAE,GAAG,MAAMjB,kBAAkBgB;QACzC,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,qBAAqB,CAAC;IACtE;AACF;AAEA;;;;;CAKC,GACDhG,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiB;IACjBC,aACE,8EACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAAC1F,qBAAqB;QAC1B,MAAM,EAAE8F,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC;QAC5C,MAAM,EAAEH,IAAI,EAAE,GAAG,MAAMG,mBAAmBJ;QAC1C,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,gBAAgB,CAAC;IACjE;AACF;AAEA;;;;;;;;;;;;;;;CAeC,GACDhG,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiB;IACjBC,aACE;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,MAAMK,OAAO,MAAMpB,oBAAoBe;QACvC,IAAIK,KAAKC,YAAY,IAAID,KAAKE,cAAc,EAAE;YAC5CL,QAAQM,IAAI,CACV,CAAC,UAAU,EAAEH,KAAKC,YAAY,CAAC,oBAAoB,EAAED,KAAKI,KAAK,CAAC,CAAC,CAAC,GAChE,CAAC,+BAA+B,EAAEJ,KAAKK,cAAc,CAAC,OAAO,CAAC,GAC9D,CAAC,UAAU,EAAEL,KAAKE,cAAc,CAAC,gCAAgC,CAAC;QAExE;IACF;AACF;AAEA;;;;;;;;;;;;;;;;;;;CAmBC,GACDtG,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiB;IACjBC,aACE,wEACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,MAAMK,OAAO,MAAMf,uBAAuBU;QAC1C,IAAIK,KAAKM,YAAY,EAAE;YACrBT,QAAQM,IAAI,CACV,CAAC,UAAU,EAAEH,KAAKM,YAAY,CAAC,qCAAqC,CAAC,GACnE,CAAC,qDAAqD,CAAC;QAE7D;IACF;AACF;AAEA;;;;;;;;;CASC,GACD1G,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiB,KAAK;IACtBC,aACE,4EACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAACY,QAAQC,GAAG,CAACC,iBAAiB,EAAE;QACpC,MAAM,EAAEC,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC;QAChD,MAAMC,SAAS,MAAMD,uBAAuBf;QAC5C,IAAIgB,OAAOC,UAAU,IAAID,OAAOE,MAAM,EAAE;YACtChB,QAAQC,IAAI,CACV,CAAC,mCAAmC,EAAEa,OAAOC,UAAU,CAAC,aAAa,CAAC,GACpE,GAAGD,OAAOE,MAAM,CAAC,eAAe,EAAEF,OAAOP,KAAK,CAAC,MAAM,CAAC;QAE5D;IACF;AACF;AAEA;;;;;CAKC,GACD,MAAMU,oBAAoB;IAAEC,aAAa;AAAK;AAE9C,2DAA2D,GAC3D,OAAO,SAASC;IACd1G;IACA,uEAAuE;IACvEK;IACAZ,0BAA0BoB;IAC1B,wEAAwE;IACxE,oEAAoE;IACpE,sEAAsE;IACtEnB,2BAA2BoB;IAC3B,kEAAkE;IAClEtB,yBAAyBwB;IACzB,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtEzB,yBAAyBwB;IACzB1B,uBAAuB,0BAA0B4B,qBAAqBuF;IACtEnH,uBAAuB,iBAAiB6B;IACxC,0EAA0E;IAC1E,+DAA+D;IAC/D7B,uBAAuB,sCAAsC,OAAOsH,KAAKC,MACvE,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGC,8BAA8B,CAACF,KAAKC;IAEnF,+DAA+D;IAC/DvH,uBAAuB,wBAAwB8B;IAC/C9B,uBAAuB,oBAAoB+B;IAC3C/B,uBAAuB,qBAAqBgC,iBAAiBmF;IAC7DnH,uBAAuB,qBAAqBiC;IAC5C,qEAAqE;IACrE,sEAAsE;IACtEjC,uBAAuB,iBAAiB;QACtCyH,KAAK,OAAOC,UAAY,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGC,eAAe,CAACD;IACjF;IACA1H,uBAAuB,uBAAuBkC;IAC9ClC,uBAAuB,2BAA2BmC;IAClD,qEAAqE;IACrEnC,uBAAuB,4BAA4BmE;IACnD,2EAA2E;IAC3E,yEAAyE;IACzEnE,uBAAuB,yBAAyB8D,oBAAoB;QAAE8D,eAAe;IAAK;IAC1F,sEAAsE;IACtE,6BAA6B;IAC7B7D,2BAA2BC;IAC3B,qEAAqE;IACrEhE,uBAAuB,4BAA4BoE;IACnDpE,uBAAuB,oBAAoBoC;IAC3CpC,uBAAuB,oBAAoBqC;IAC3CrC,uBAAuB,qCAAqCsC;IAC5DtC,uBAAuB,oBAAoBmD,gBAAgBgE;IAC3DnH,uBAAuB,iBAAiBuC;IACxCvC,uBAAuB,wBAAwBwC;IAC/CxC,uBAAuB,mBAAmBoD;IAC1CpD,uBAAuB,gCAAgCqD;IACvDrD,uBAAuB,oBAAoBsD;IAC3C,wEAAwE;IACxE,qBAAqB;IACrBtD,uBAAuB,2BAA2BoF;IAClDpF,uBAAuB,sBAAsByC;IAC7CzC,uBAAuB,sBAAsB4C;IAC7C5C,uBAAuB,oBAAoB6C;IAC3C7C,uBAAuB,qBAAqB8C;IAC5C,wDAAwD;IACxD9C,uBAAuB,sBAAsB+C;IAC7C/C,uBAAuB,uBAAuBgD;IAC9ChD,uBAAuB,oBAAoBiD;IAC3CjD,uBAAuB,uBAAuBkD;AAChD;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAAS2E;IACd,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,0CAA0C;IAC1CzH,0BAA0BoB;IAC1B,uEAAuE;IACvE,8EAA8E;IAC9Eb;IACA,yEAAyE;IACzE,8EAA8E;IAC9E,uCAAuC;IACvCI;IACA,2EAA2E;IAC3EH;IACA,2EAA2E;IAC3E,4EAA4E;IAC5E,iDAAiD;IACjDE;IACAD;IACA,yEAAyE;IACzE,wEAAwE;IACxE,uEAAuE;IACvE,yBAAyB;IACzBJ;IACA,wEAAwE;IACxE,uDAAuD;IACvDC;IACA,sEAAsE;IACtEM;IACA,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnEC,wBAAwBC,yBAAyB;QAAEuE,UAAUjF;IAAU;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,qEAAqE;IACrEY,sBAAsBC,uBAAuB;QAAEoE,UAAUjF;IAAU;IACnE,uEAAuE;IACvE,iEAAiE;IACjET,8BAA8BuB;IAC9B,4EAA4E;IAC5E,2EAA2E;IAC3E,uDAAuD;IACvDtB,uBAAuB,yBAAyBwD;IAChD,qEAAqE;IACrExD,uBAAuB,mCAAmCyD;IAC1DzD,uBAAuB,oBAAoBuD;IAC3CvD,uBAAuB,wBAAwB2D;IAC/C,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,wDAAwD;IACxD3D,uBAAuB,0BAA0B4D;IACjD,yEAAyE;IACzE,yEAAyE;IACzE,0CAA0C;IAC1C5D,uBAAuB,8BAA8B,OAAOsH,KAAKC,MAC/D,AAAC,CAAA,MAAM,MAAM,CAAC,uCAAmC,EAAGO,uBAAuB,CAACR,KAAKC;IAEnF,0EAA0E;IAC1E,0EAA0E;IAC1E,iBAAiB;IACjBvH,uBAAuB,+BAA+B6D;IACtD,6EAA6E;IAC7E,4EAA4E;IAC5E,iBAAiB;IACjB7D,uBAAuB,0BAA0B,OAAOsH,KAAKC,MAC3D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGQ,kBAAkB,CAACT,KAAKC;IAEpEvH,uBAAuB,2BAA2B,OAAOsH,KAAKC,MAC5D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGS,mBAAmB,CAACV,KAAKC;IAErE,iEAAiE;IACjE,uEAAuE;IACvE,yDAAyD;IACzDvH,uBAAuB,uBAAuB,OAAOsH,KAAKC,MACxD,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGU,gBAAgB,CAACX,KAAKC;IAErEvH,uBAAuB,iCAAiC,OAAOsH,KAAKC,MAClE,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGW,yBAAyB,CAACZ,KAAKC;IAE9E,qEAAqE;IACrE,sEAAsE;IACtE,gEAAgE;IAChEvH,uBAAuB,uBAAuBiE;IAC9C,0EAA0E;IAC1E,4EAA4E;IAC5EjE,uBAAuB,wBAAwB;QAAEyH,KAAKtG;IAAkB;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9EnB,uBAAuB,4BAA4B;QACjDyH,KAAK,OAAOC,UACV,AAAC,CAAA,MAAM,MAAM,CAAC,8BAA0B,EAAGS,qBAAqB,CAACT;IACrE;IACA,uEAAuE;IACvE,uEAAuE;IACvE1H,uBAAuB,kCAAkC0D;IACzD,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvE1D,uBACE,6BACA0C;IAEF1C,uBAAuB,2BAA2B2C;IAClD3C,uBAAuB,wBAAwBkE;IAC/ClE,uBAAuB,sBAAsBqE;IAC7C,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,0EAA0E;IAC1E,oEAAoE;IACpErE,uBAAuB,qBAAqBsE;IAC5CtE,uBACE,iDACA;QACEyH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGC,cAAc,CAACX,SAASU;IACpE,GACA;QAAEE,SAAS;IAAK;IAElBtI,uBACE,iDACA;QACEyH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGG,2BAA2B,CAACb,SAASU;IACjF,GACA;QAAEE,SAAS;IAAK;IAElB,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,oDAAoD;IACpDtI,uBAAuB,wBAAwBuE;IAC/CvE,uBAAuB,wBAAwBwE;IAC/CxE,uBAAuB,wBAAwB0E;IAC/C,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpE1E,uBAAuB,sBAAsB2E;IAC7C,kEAAkE;IAClEC;IACA,0EAA0E;IAC1E,4EAA4E;IAC5E,iDAAiD;IACjD5E,uBAAuB,6BAA6B,OAAOsH,KAAKC,MAC9D,AAAC,CAAA,MAAM,MAAM,CAAC,+BAA2B,EAAGiB,qBAAqB,CAAClB,KAAKC;IAEzE,4EAA4E;IAC5E,2EAA2E;IAC3E,QAAQ;IACRvH,uBAAuB,0CAA0CyE;IACjEzE,uBAAuB,8BAA8B6E;IACrD7E,uBAAuB,4BAA4B+E;IACnD/E,uBAAuB,mBAAmBkF;IAC1C,qEAAqE;IACrE,2DAA2D;IAC3DlF,uBAAuB,oBAAoBqF;IAC3C,yEAAyE;IACzE,kDAAkD;IAClDrF,uBAAuB,2BAA2BmF;IAClDnF,uBAAuB,4BAA4BuF;IACnD,qEAAqE;IACrE,kCAAkC;IAClCvF,uBAAuB,oCAAoC,OAAOsH,KAAKC,MACrE,AAAC,CAAA,MAAM,MAAM,CAAC,sCAAkC,EAAGkB,4BAA4B,CAACnB,KAAKC;IAEvF,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtEvH,uBACE,gCACA;QACEyH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGM,gBAAgB,CAAChB,SAASU;IACrE,GACA;QAAEE,SAAS;IAAK;IAElB,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpEtI,uBACE,iCACA;QACEyH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGO,iBAAiB,CAACjB,SAASU;IACvE,GACA;QAAEE,SAAS;IAAK;IAElB,uEAAuE;IACvE,mCAAmC;IACnCtI,uBAAuB,gCAAgC,OAAOsH,KAAKC,MACjE,AAAC,CAAA,MAAM,MAAM,CAAC,kCAA8B,EAAGqB,yBAAyB,CAACtB,KAAKC;IAEhF,qEAAqE;IACrE,yEAAyE;IACzE,uDAAuD;IACvDhG,2BAA2B,IAAMhB,cAAcsI,GAAG,GAAGC,SAAS;AAChE;AAEA,6DAA6D;AAC7D,SAASC,iBAAiB,QAAQ,uBAAmB;AAErD,mEAAmE;AACnE,yDAAyD;AACzD,cAAc,yBAAqB"}

package/src/lib/tenant-emails.js

@@ -780,6 +780,64 @@ const ORDER_FOOTER_REASON = 'You’re receiving this because you placed an order
             ],
             footerReason: 'You’re receiving this because you started a checkout with {{host.businessName}}.'
         },
+        {
+            // AGL-3736: days after fulfilment, one per order, with a single-use
+            // link per product that opens its review form pre-verified.
+            key: 'review-request',
+            name: 'Review request',
+            description: 'Asks a buyer to review what they bought, a set number of days after ' + 'the order is fulfilled. One per order; each product has its own ' + 'single-use link. Turn it off or change the delay in Settings → Reviews.',
+            requiresFeature: 'productReviews',
+            pluginId: 'commerce',
+            plugin: 'Commerce',
+            control: 'besigner',
+            defaultSubject: 'How was your order from {{host.businessName}}?',
+            mergeTokens: [
+                ORDER_NUMBER_TOKEN,
+                {
+                    name: 'review.products',
+                    description: 'Each product to review, one per line, with its own review link',
+                    sample: 'House Blend: https://shop.example.com/products/house-blend?review=…'
+                },
+                {
+                    name: 'review.url',
+                    description: 'The review link for the first product',
+                    sample: 'https://shop.example.com/products/house-blend?review=…'
+                },
+                {
+                    name: 'review.productName',
+                    description: 'The first product’s name',
+                    sample: 'House Blend'
+                }
+            ],
+            defaultBody: [
+                {
+                    block: 'text',
+                    text: 'How did we do?',
+                    variant: 'heading'
+                },
+                {
+                    block: 'text',
+                    text: 'Thanks again for your order {{order.number}} from ' + '{{host.businessName}}. Would you tell other shoppers what you ' + 'think? Each link opens the product with a review form.',
+                    variant: 'body'
+                },
+                {
+                    block: 'text',
+                    text: '{{review.products}}',
+                    variant: 'body'
+                },
+                {
+                    block: 'button',
+                    label: 'Write a review',
+                    href: '{{review.url}}'
+                },
+                {
+                    block: 'text',
+                    text: 'Each link works once, for 60 days.',
+                    variant: 'caption'
+                }
+            ],
+            footerReason: ORDER_FOOTER_REASON
+        },
         {
             key: 'member-post',
             name: 'New member post',